IT Manager - Cyber Security | Onsite: Hagerstown, Maryland

IT Manager | Cyber Security 
compensation based on experience - up to: $209k
onsite: Hagerstown, Maryland

At Meritus Health, protecting patient data and system integrity is a mission-critical priority. As IT Manager – Cybersecurity, you’ll lead the design, implementation, and oversight of enterprise-wide security solutions. This hands-on leadership role requires deep technical expertise and a proactive approach to risk management, incident response, and regulatory compliance.

You’ll collaborate across IT teams and with third-party partners to assess vulnerabilities, drive remediation, and strengthen defenses. From guiding security audits to mentoring junior engineers, you’ll help build a resilient infrastructure that safeguards patient care and operational continuity.

Key Responsibilities

• Design and implement cybersecurity solutions, standards, and procedures across the Meritus enterprise

• Lead incident response and remediation efforts for systems, applications, and infrastructure vulnerabilities

• Collaborate with managed services providers to review and execute corrective action plans

• Coordinate internal audits and risk assessments in support of HIPAA, PCI, and Meaningful Use compliance

• Conduct phishing simulations, review risk exceptions, and support Business Integrity and Compliance initiatives

• Develop and maintain security policies, procedures, and documentation aligned with NIST and industry standards

• Perform periodic reviews of infrastructure and system configurations to ensure compliance and integrity

• Provide audit reports and support investigations as needed

• Guide secure configuration of servers, firewalls, VPNs, IPS, routers, and switches

• Analyze scan results, resolve vulnerabilities, and document exceptions or false positives

• Manage eradication and recovery steps as part of incident response protocols

• Partner with IT operations, applications, and network/server teams to coordinate security efforts

• Mentor and develop junior security engineers, fostering a culture of collaboration and continuous learning

Minimum Qualifications

Education

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Business, or related field required

• Equivalent relevant experience in application security analysis, systems analysis, or testing may be considered

Experience

• Minimum of 7 years of progressive experience in cybersecurity, network, or server-related roles

• Proven experience creating and maintaining NIST documentation (e.g., SSPs, risk assessments, configuration management)

• 3 years of leadership experience preferred, with a strong desire to coach and develop team members

• Working knowledge of SIEM/VTM technologies, cloud security, application security, network security, and disaster recovery

• Experience analyzing scan results and collaborating with stakeholders to resolve vulnerabilities

Licensure/Certification

• Preferred certifications include: CompTIA Security+, CEH, CISSP, SANS GIAC, CCNA, Certified Ethical Hacker

• Additional certifications in security platforms or tools are a plus

Knowledge, Skills, and Abilities

• Deep understanding of information security frameworks and regulatory obligations (HIPAA, PCI DSS, HITRUST, NIST)

• Familiarity with tools such as HIPAA One, KnowBe4, Nessus, AlienVault, Cyberreason, Symantec ATP, Cisco ASA, Duo, Big Fix

• Strong analytical, problem-solving, and communication skills

• Ability to manage complex technical environments and lead cross-functional initiatives

• Commitment to confidentiality, integrity, and continuous improvement

 

Caring for Our Team 
We are committed to supporting the well-being and professional development of our team members through a comprehensive benefits package, which includes: