Senior Manager, Information Security

Vatica Health, Inc.; United States; Remote; USD 153,000 - 187,000; Full time

Benefits offered by this job

Competitive salary

Bonus potential

401k plans

Medical, dental, vision insurance

Paid time off

Flexible work-life balance

Job summary

Vatica Health, Inc. is seeking a Senior Manager of Information Security to lead the information security program across Vatica Health + Cozeva, translating strategy into prioritized work and measurable risk reductions.

You will develop security professionals and partner with Engineering, Compliance, and business leaders to embed security into technology delivery and operations, balancing technical judgment with disciplined execution and clear risk communication.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field, or equivalent practical experience.
• 10+ years of progressive experience in cybersecurity, information security, or security engineering, including 2+ years leading security teams or managing security programs.
• Hands-on experience with cloud and enterprise security, including Azure and AWS, identity and access management, endpoint protection, network security, encryption, and key management.
• Experience with security monitoring and SIEM platforms, endpoint detection and response, web application firewalls, data loss prevention, and vulnerability management tools.
• Experience leading incident response and coordinating remediation across technical teams; working knowledge of secure software development, DevSecOps, and Zero Trust principles.

Responsibilities

• Security Program and Team Leadership: Translate the security roadmap into priorities, delivery plans, and team goals. Assign ownership, monitor progress, and elevate resource constraints and unresolved risks.
• Security Engineering and Vulnerability Management: Lead security control implementation across Azure, AWS, and on-premises environments. Prioritize vulnerabilities by exposure and business impact, track remediation with accountable owners, and verify closure.
• Cloud Infrastructure and Data Protection: Oversee cloud configuration monitoring, identity and privileged access controls, endpoint and network protection, encryption, and data loss prevention.
• Security Operations and Incident Response: Oversee monitoring, threat detection, investigation, and response. Lead technical incident coordination, containment, and recovery with system owners; expedite promptly to leadership and Compliance.
• Governance Risk and Assurance: Maintain security policies, standards, risk assessments, and control evidence in partnership with Compliance. Support applicable HIPAA obligations, HITRUST requirements, SOC 2 examinations, and internal reviews.
• AI and Emerging Technology Security: Assess security risks in AI tools, external services, and third‑party integrations. Implement safeguards against sensitive data exposure and unauthorized access.

Skills

Security leadership

Threat modeling

Cloud security

Zero Trust

Incident response

Business risk communication

Education

Bachelor’s degree in Information Security/CS/IT or equivalent

Tools

Azure

AWS

SIEM

WAF

DLP tools

Vulnerability management tools

Job description

The Senior Manager, Information Security leads the day-to-day execution of the information security program across Vatica Health + Cozeva, protecting healthcare data, systems, and platforms. This role translates the security strategy into prioritized work, effective controls, and measurable improvements in risk reduction and incident readiness.

The Senior Manager leads and develops security professionals and partners with Engineering, Infrastructure, DevOps, Compliance, and business leaders to embed security into technology delivery and operations. The role combines technical judgment with disciplined execution, clear communication of business risk, and accountability for resolving security gaps.

RESPONSIBILITIES

• Security Program and Team Leadership: Translate the security roadmap into priorities, delivery plans, and team goals. Assign ownership, monitor progress, and elevate resource constraints and unresolved risks. Coach team members, manage performance, and oversee security vendors, projects, and approved budgets.

• Security Engineering and Vulnerability Management: Lead security control implementation across Azure, AWS, and on-premises environments. Partner with technical owners on architecture reviews, secure design, threat modeling, and security checks in software delivery pipelines. Prioritize vulnerabilities by exposure and business impact, track remediation with accountable owners, and verify closure.

• Cloud Infrastructure and Data Protection: Oversee cloud configuration monitoring, identity and privileged access controls, endpoint and network protection, encryption, and data loss prevention. Partner with Infrastructure and Engineering to address control gaps and advance Zero Trust practices.

• Security Operations and Incident Response: Oversee monitoring, threat detection, investigation, and response. Lead technical incident coordination, containment, and recovery with system owners; expedite promptly to leadership and Compliance. Maintain response plans, conduct exercises and lessons-learned reviews, and track corrective actions. Support disaster recovery and business continuity testing.

• Governance Risk and Assurance: Maintain security policies, standards, risk assessments, and control evidence in partnership with Compliance. Support applicable HIPAA obligations, HITRUST requirements, SOC 2 examinations, and internal reviews. Track findings through remediation and report control effectiveness, risk trends, and decisions needed from leadership.

• AI and Emerging Technology Security: Assess security risks in AI tools, external services, and third‑party integrations. Implement safeguards against sensitive data exposure and unauthorized access. Partner with Engineering and Compliance on approved use, access controls, and monitoring, and evaluate emerging threats and security technologies.

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field, or equivalent practical experience.

• 10+ years of progressive experience in cybersecurity, information security, or security engineering, including 2+ years leading security teams or managing security programs.

• Demonstrated success translating security priorities into implemented controls, resolved findings, and measurable operational improvements in a regulated environment.

• Hands‑on experience with cloud and enterprise security, including Azure and AWS, identity and access management, endpoint protection, network security, encryption, and key management.

• Experience with security monitoring and SIEM platforms, endpoint detection and response, web application firewalls, data loss prevention, and vulnerability management tools.

• Experience leading incident response and coordinating remediation across technical teams; working knowledge of secure software development, DevSecOps, and Zero Trust principles.

• Ability to assess business risk, set priorities, communicate recommendations to technical and business audiences, and drive follow‑through across teams.

PREFERRED QUALIFICATIONS

Experience protecting healthcare environments and protected health information (PHI), with knowledge of HIPAA, HITRUST, SOC 2, and the NIST Cybersecurity Framework.

Experience securing cloud‑native platforms, AI‑enabled applications, and third‑party AI integrations.

Relevant security certification such as CISSP, CISM, CCSP, GIAC, or a cloud security certification.

WORKING AT VATICA HEALTH ADVANTAGES

Prosperity

• Competitive salary based on your experience and skills – we believe the top talent deserves the top dollar
• Bonus Potential (based on role and is discretionary) – if you go above and beyond, you should be rewarded
• 401k plans– we want to empower you to prepare for your future
• Room for growth and advancement- we love our employees and want to develop within

Good Health

• Comprehensive Medical, Dental, and Vision insurance plans
• Tax‑free Dependent Care Account
• Life insurance, short‑term, and long‑term disability

Happiness

• Excellent PTO policy (everyone deserves a vacation now and then)
• Great work‑life balance environment- We believe family comes first!
• Strong supportive teams- There is always a helping hand when you need it

The salary for a position is typically determined by multiple factors such as the individual’s qualifications, experience, skills, and location. The projected compensation range for the position may vary based on these factors and with a base salary range up to $170,000 (annualized USD). However, this estimate represents just one aspect of our total compensation package offered.