Cybersecurity Manager | Full Time | Days | In Office Position

This position is an in-office position.

Summary

Under the general direction of the Chief Information Security Officer, the Cybersecurity Manager is responsible for implementing, and contributing to the development of, an organization's cybersecurity strategy, implementing security measures, and ensuring compliance with relevant regulations. They lead teams, develop security policies, and respond to incidents, while also staying informed about the latest cyber threats. 

Required Skills and Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field.

• Demonstrable experience as a Cybersecurity Manager, or similar role, and at least 5 years in cybersecurity overall.

• Extensive knowledge of regional and global cybersecurity frameworks, such as NIST, ISO 27001, SOC 2, and CIS Controls.

• Experience in data protection and cybersecurity, including incident management, security incident response frameworks, and disaster recovery planning.

• Proficiency in security technologies and tools, including SIEM, firewalls, VPNs, data encryption protocols, and anti-malware solutions.

• Strong understanding of HIPAA, or similar data privacy regulations.

• Hands-on experience with vulnerability assessments, penetration testing, and ethical hacking.

• Strong leadership and team management skills, with experience leading cybersecurity initiatives.

• Solid analytical and problem-solving skills, with the ability to identify and mitigate data security risks.

• Excellent communication skills, with the ability to work cross-functionally with IT, clinical, legal, and business stakeholders.

Preferred Skills and Qualifications

• Relevant certification in cybersecurity, such as CISSP, CISM, or CEH.

• Experience with cloud security, securing hybrid environments, and endpoint protection.

• Experience with regulatory compliance related to cybersecurity and data privacy laws.

• Knowledge of threat intelligence platforms and advanced persistent threats (APT).

• Familiarity with Zero Trust Architecture and its implementation.

• Expertise in threat modelling, risk management, and securing biomedical systems.

• Contributions to open-source security projects or research publications.

Key Responsibilities

• Lead and manage cybersecurity team: This involves hiring, training, and mentoring cybersecurity professionals, as well as managing their performance.

• Oversee cybersecurity budgets: This includes developing, managing, and tracking budgets related to security initiatives and technologies. 

• Conduct risk assessments: Identifying potential vulnerabilities and threats to the organization's systems and data. 

• Implement security measures: Deploying firewalls, intrusion detection systems, and other security technologies to protect against cyber threats. 

• Monitor and respond to security incidents: Identifying, containing, and recovering from security breaches and other cyber incidents. 

• Ensure compliance with regulations: Staying current on relevant regulations and ensuring that the organization's security practices are compliant. 

• Develop and maintain security policies: Creating and updating policies that govern the organization's cybersecurity practices. 

• Work with other departments: Collaborating with other departments to ensure that cybersecurity is integrated into the organization's overall operations. 

• Evaluate and implement appropriate security technologies: Staying current on the latest security tools and technologies and recommending them for implementation. 

• Monitor security trends and threats: Staying informed about the latest cyber threats and adjusting the organization's security posture accordingly. 

• Communicate cybersecurity information: Communicating cybersecurity information to both internal and external stakeholders. This includes educating employees on cybersecurity best practices and how to protect themselves from cyber threats.  

• Provide reports to management: Providing regular reports to management on the organization's cybersecurity posture and progress. 

Concord Hospital is an Equal Employment Opportunity employer. It is our policy to provide equal opportunity to all employees and applicants and to prohibit any discrimination because of race, color, religion, sex, sexual orientation, gender, gender identity, national origin, age, ma