Manager, Security Operations

Who We Are

Point32Health is a leading not-for-profit health and well-being organization dedicated to delivering high-quality, affordable healthcare. Serving nearly 2 million members, Point32Health builds on the legacy of Harvard Pilgrim Health Care and Tufts Health Plan to provide access to care and empower healthier lives for everyone. Our culture revolves around being a community of care and having shared values that guide our behaviors and decisions. We’ve had a long-standing commitment to inclusion and equal healthcare access and outcomes, regardless of background; it’s at the core of who we are. We value the rich mix of backgrounds, perspectives, and experiences of all of our colleagues, which helps us to provide service with empathy and better understand and meet the needs of the communities where we serve, live, and work. 

We enjoy the important work we do every day in service to our members, partners, colleagues and communities. Learn more about who we are at Point32Health.

Job Summary

The Manager, Security Operations will lead a team of security analysts/engineers/administrators responsible for identity and access management, security event monitoring, and operational support across enterprise systems and cloud environments. This role focuses on achieving operational excellence, improving efficiency, and ensuring compliance with security standards and audit requirements.

Job Description

DUTIES/RESPONSIBILITIES – what you will be doing (top five):

Leadership & Strategy

• Manage and mentor a team performing security operations activities.
• Drive operational efficiency through process improvements
• Enforce security policies, standards, and best practices.
• Collaborate with stakeholders to align security operations with business objectives. 

Core Operational Activities Oversight

• Oversee Role Mining, RBAC implementation, and RBAC recertification.
• Ensure timely privileged and non-privileged account provisioning (AD, Entra, CD, IM, PM, AIM).
• Manage SSO configurations, certificate renewals, and User Entitlement Reviews (UERs).
• Supervise exception management and periodic access reviews.
• Ensure routine security configurations for C&IS applications, platforms, and cloud environments.
• Oversee daily intel briefings and security event triage for low-to-medium severity incidents.
• Validate log reviews, alert responses, and escalation processes.
• Coordinate technical activities such as upgrades, integration maintenance, and on-call incident support.

Governance & Compliance

• Implement audit requirements and ensure adherence to regulatory and internal standards.
• Prepare for audits and lead remediation efforts.
• Track and report on security metrics and operational KPIs.

QUALIFICATIONS – what you need to perform the job

Certification and Licensure

Education

• Required (minimum): Bachelor’s degree in cyber security, Computer Science, Risk Management, or related field preferred or equivalent experience
• Preferred: Master’s degree

Experience

• Required (minimum): 5-7 years of professional experience
• Preferred: 5-7 years’ experience in cyber security initiatives which may include some or a combination of roles in IT Security, cyber security, risk, compliance, audit, threat detection, data privacy, etc.
• Understanding of cyber-security and IT systems that may include web access management, vulnerability and scanning management, security design, operating system environments, etc.
• Experience managing a team and/or coaching team members
• Experience developing policies/procedures for security processes

Skill Requirements

• Ability to lead a team including mentoring, coaching, and motivating, providing an opportunity to learn and grow at Point32Health
• Proven track record of successfully managing projects, with a particular emphasis on handling complex assignments
• Demonstrated history of achieving customer satisfaction by effectively managing both internal and external stakeholders
• Strong relationship building skills; Must be able to work collaboratively and cooperatively as a team member and as a people manager
• Ability to influence peers and business stakeholders
• Ability to effectively lead discussions and initiatives associated with Cyber & Information Security and to actively participate in technical discussions.

WORKING CONDI