Cyber Security Incident Response Manager

Mosaic Health is a national care delivery platform focused on expanding access to comprehensive primary care for consumers with coverage across Commercial, Individual Exchange, Medicare, and Medicaid health plans. The Business Units which comprise Mosaic Health are multi-payer and serve nearly one million consumers across 19 states, providing them with access to high quality primary care, integrated care teams, personalized navigation, expanded digital access, and specialized services for higher-need populations. Through Mosaic Health, health plans and employers have an even stronger care provider partner that delivers affordability and superior experiences for their members and employees, including value-based primary care capacity integrated with digital patient engagement and navigation. Each of the companies within Mosaic Health provide unique offerings that together promise to improve individuals' health and wellbeing, while helping care providers deliver higher quality care. For more information, please visit www.mosaichealth.com or follow Mosaic Health on LinkedIn.

Formed in 2008 and headquartered in Fort Myers, Florida, with offices in Florida, North Carolina, and Texas,
Millennium Healthcare is the largest independent physician group in the state of Florida and one of the largest in the United States. At Millennium Physician Group, our employees are the foundation of our success. Our promise is to provide you with the tools to do your job successfully, as well as providing a team atmosphere that empowers you to seek better ways to deliver care to our patients and their families. We also promise to care for you as an individual and help you grow in your role.

The Cyber Security Incident Response Manager will support all business units within Mosaic Health and is responsible for overseeing the organization's response to cyber security incidents, ensuring the effective detection, containment, remediation, and recovery of systems following security events. This role involves leading a team of Incident Response Specialists, coordinating with other security teams, and driving incident response efforts to minimize the impact of breaches while maintaining regulatory compliance. The Cyber Security Incident Response Manager is responsible for developing, implementing, and continuously improving the incident response strategy to protect the organization's data, systems, and reputation.

This position requires strong leadership, expert knowledge of incident response methodologies, and the ability to manage high-stakes situations while ensuring effective communication across internal teams and external stakeholders.

Responsibilities

• Lead and manage the incident response team, including Incident Response Specialists, to ensure
prompt and effective handling of cyber security incidents and breaches.
• Develop, implement, and continuously improve the organization's incident response plans,
playbooks, and protocols, ensuring they align with industry standards and best practices.
• Coordinate cross-functional response efforts, working closely with IT, legal, compliance, risk
management, communications, and executive teams during cyber security incidents.
• Oversee the identification, analysis, containment, and remediation of security incidents, ensuring
timely recovery and minimum impact on business operations.
• Conduct post-incident reviews to evaluate the effectiveness of response efforts, document lessons
learned and identify opportunities for improving incident management strategies and security
posture.
• Monitor and evaluate emerging cyber threats and develop strategies to mitigate risks, ensuring that
the incident response team is prepared for evolving attack vectors.
• Ensure compliance with regulatory requirements (e.g., HIPAA, PCI-DSS) during incident response,
reporting, and documentation processes.
• Establish metrics and KPIs for incident response activities, tracking and reporting on response times,
incident volumes, and improvements in security posture over time.
• Lead the development of training programs and simulation exercises (e.g., tabletop exercises) to
keep incident response personnel prepared for various types of security i