Senior Cybersecurity Manager

Orion Groups; United States; Remote; USD 160,000 - 180,000; Full time

Benefits offered by this job

15% bonus

Job summary

Orion Groups is seeking a Senior Cybersecurity Manager to oversee security governance programs, coordinate SOX IT controls, and manage client and vendor security reviews across enterprise healthcare environments. This 12‑month W2 contract-to-hire role is fully remote in the United States with a base salary of $160,000–$180,000 plus a 15% bonus and comprehensive benefits.

You will partner with Sales, Client Services, and Operations, manage third‑party risk, and serve as the SPOC for governance

Qualifications

• 10+ years in information security, risk management, compliance, audit, or governance.
• 5+ years of leadership or program management experience.
• Strong knowledge of SOX IT controls (ITGC), security governance & compliance, vendor risk management, client security reviews and due diligence, and risk assessment methodologies.
• Knowledge of SOC, NIST, ISO 27001, HIPAA, and healthcare security requirements.
• Experience working directly with customers, auditors, and executive stakeholders.

Responsibilities

• Lead security governance activities, ensuring adherence to corporate security policies, regulatory requirements, and industry best practices.
• Coordinate and manage SOX IT General Controls (ITGC) activities, control testing, remediation efforts, evidence collection, and audit support.
• Support internal and external audits, including SOX, SOC, client audits, and regulatory assessments.
• Track compliance initiatives and monitor remediation activities through completion.
• Facilitate governance forums and provide regular updates to executive leadership.
• Serve as the primary security representative and partner with Sales, Client Services, and Operations teams to address customer security requirements during contract negotiations and ongoing service delivery.
• Manage third-party security risk management processes as well as conduct security reviews and risk assessments for vendors, partners, and service providers.
• Strategic partnership with the hospital by serving as a primary liaison to the hospital's Enterprise Security, Risk, and Compliance organizations.
• Represent in enterprise security governance, risk management, and strategic planning activities.

Skills

Leadership

Program management

Regulatory compliance

SOX ITGC

Security governance

Education

Bachelor's degree in Information Security / CS / IT

Master's degree preferred

CISSP, CISM, CRISC, CISA or Security+

Job description

ORION GROUPS is a professional services firm based in McKinney, Texas that provides experienced consultants to key organizations across the United States. We focus our talent expertise in both the financial and healthcare industries. Our capabilities in technology include application management, enterprise software systems, data strategies, integration, and IT infrastructure. We work diligently to listen and provide value to your unique needs. www.OrionGRPS.com

OVERVIEW

Orion Groups is seeking a Senior Cybersecurity Manager to manage the security governance programs, SOX IT controls coordination, customer and vendor security reviews, client-facing security engagements, regulatory and compliance assessments, and cross-functional security initiatives. This opportunity will act as the single point of contact (SPOC) for security governance matters across large enterprise healthcare systems.

OPPORTUNITY

• Duration: 12-month W2 contract-to-hire
• Location: Fully Remote in the United States
• Salary: $160,000 -- 180,000 base plus 15% bonus and benefits

KEY RESPONSIBILITIES

• Lead security governance activities, ensuring adherence to corporate security policies, regulatory requirements, and industry best practices.
• Coordinate and manage SOX IT General Controls (ITGC) activities, control testing, remediation efforts, evidence collection, and audit support.
• Support internal and external audits, including SOX, SOC, client audits, and regulatory assessments.
• Track compliance initiatives and monitor remediation activities through completion.
• Facilitate governance forums and provide regular updates to executive leadership.
• Serve as the primary security representative and partner with Sales, Client Services, and Operations teams to address customer security requirements during contract negotiations and ongoing service delivery.
• Manage third-party security risk management processes as well as conduct security reviews and risk assessments for vendors, partners, and service providers.
• Strategic partnership with the hospital by serving as a primary liaison to the hospital's Enterprise Security, Risk, and Compliance organizations.
• Represent in enterprise security governance, risk management, and strategic planning activities.

KEY EXPERIENCE

• Experience in healthcare, revenue cycle management, or regulated industries.
• Experience supporting large-scale enterprise security programs and governance frameworks.
• Experience with the hospital or complex multi-entity healthcare environments.
• 10+ years of experience in Information Security, Risk Management, Compliance, Audit, or Governance.
• 5+ years of leadership or program management experience.
• Strong knowledge of: SOX IT Controls (ITGC), Security Governance & Compliance, Vendor Risk Management, Client Security Reviews and Due Diligence, and Risk Assessment Methodologies.
• Knowledge of SOC, NIST, ISO 27001, HIPAA, and healthcare security requirements.
• Experience working directly with customers, auditors, and executive stakeholders.

EDUCATION

• Bachelor's degree in Information Security, Computer Science, Information Technology, Business Administration, or related field/experience; Master's degree is preferred
• Industry certifications such as: CISSP, CISM, CRISC, CISA or Security+

INTERVIEW PROCESS

• Quick turnaround: preliminary interview followed by team interview on phone and Google Meets.
• Typically, three rounds with the hiring manager, joined by the team (virtual interview), possibly four rounds if necessary.

Orion Groups is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, sexual orientation, gender identity or any other characteristic protected by law. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment.