Senior Manager, IT Security

verawholehealth; United States; Remote; USD 180,000 - 240,000; Full time

Job summary

verawholehealth is seeking a security leader to guide a team across security operations, application security, cloud security, and governance. You will balance hands-on execution with coaching and customer interactions to articulate risk, controls, and remediation plans under pressure.

You will coordinate with legal, commercial, and product teams; drive secure development practices and deployment controls; support audits for SOC 2, HITRUST, and NIST; and track remediation times and patch

Qualifications

• 7+ years of progressive information security experience with leadership including coaching or mentoring technical staff.
• Experience engaging with enterprise customer security leaders, procurement teams, or health plan security executives.
• Background reviewing security contract provisions, supporting enterprise proposals, and presenting security practices to external stakeholders.
• Hands-on application security experience, including dynamic testing, secure development lifecycles, or CI/CD controls.
• Cloud security architecture experience; containerized and microservice environments are relevant.
• Working knowledge of SOC 2, HITRUST, and NIST, with experience implementing controls and supporting auditability.
• Strong incident communication skills and ability to collaborate with engineering, product, legal, and executive teams.

Responsibilities

• Lead and coach specialists across security operations, application security, cloud security, and governance, risk, and compliance.
• Oversee security automation, infrastructure hardening, vulnerability management, and patch coordination.
• Partner with commercial, legal, and sales teams on security contract terms, proposal responses, and customer security reviews.
• Serve as a technical contact for customers during security issues, explaining impact, remediation, and recovery plans alongside technology leadership.
• Conduct technical reviews, strengthen secure development practices and deployment pipeline controls, and guide cloud security architecture.
• Support audit teams in maintaining technical controls aligned with SOC 2, HITRUST, and NIST, and track operational measures such as remediation times and patch compliance.

Skills

Security leadership

Customer engagement

Contract review

Application security

Cloud security

Security frameworks

Incident communication

Cross-functional collaboration

Job description

Role overview

Lead a security team while remaining involved in technical execution and customer engagement. The role covers security operations, application and cloud security, audit readiness, and incident coordination, while also helping enterprise customers understand the organization’s security posture. It calls for a player-coach who can guide engineers, work across business functions, and communicate clearly during high-pressure situations.

Responsibilities

• Lead and coach specialists across security operations, application security, cloud security, and governance, risk, and compliance.
• Oversee security automation, infrastructure hardening, vulnerability management, and patch coordination.
• Partner with commercial, legal, and sales teams on security contract terms, proposal responses, and customer security reviews.
• Serve as a technical contact for customers during security issues, explaining impact, remediation, and recovery plans alongside technology leadership.
• Conduct technical reviews, strengthen secure development practices and deployment pipeline controls, and guide cloud security architecture.
• Support audit teams in maintaining technical controls aligned with SOC 2, HITRUST, and NIST, and track operational measures such as remediation times and patch compliance.

Requirements

• At least seven years of progressive information security experience, including leading, coaching, or mentoring technical security staff.
• Experience engaging directly with enterprise customer security leaders, procurement teams, or health plan security executives.
• Background reviewing security contract provisions, supporting enterprise proposals, and presenting security practices to external stakeholders.
• Hands-on application security experience, including dynamic testing, secure development lifecycles, or CI/CD controls.
• Cloud security architecture experience; containerized and microservice environments are relevant.
• Working knowledge of SOC 2, HITRUST, and NIST, with experience implementing controls and supporting auditability.
• Strong incident communication skills and ability to collaborate with engineering, product, legal, and executive teams.