Manager, Security Technology

Make a difference. Be happy. Grow your career.

Job Summary

​​The role of the Manager, Security Technology is to provide vision, leadership and support to the Cybersecurity Technologies team.  Perform as a Subject Matter Expert leading a team of administrators and engineers in researching, evaluating, implementing, integrating, troubleshooting, and maintaining technology platforms that provide cybersecurity protections to further the healthcare organization’s mission. This role will perform evaluations and provide recommendations of cost-effective security controls to mitigate risk (e.g., protection of information, systems, and processes).  Provide support and guidance to IT for all customer and affiliate entities.  Document work in the form of incident reports, policies, standards, network security diagrams, playbooks, and knowledge base articles in support of Payment Card Industry Compliance Data Security Standard (PCI-DSS), Health Information Trust Alliance (HITRUST), Health Insurance Portability and Accountability Act (HIPAA), and cybersecurity defense and protection due-diligence and due care.

Nordic, is a repeat Best in KLAS IT Services Firm and solely serving the healthcare industry, strives to empower healthcare providers to leverage technology and to realize digital transformation. All Nordic staff embrace Nordic’s maxims and mission to serve our customers who care so well for us.

Key Responsibilities

• Manage tasks related to the operation, servicing, troubleshooting, and administration of cybersecurity technologies:

• Recognize cybersecurity risks and make appropriate recommendations to suitable governance bodies for addressing them.

• Analyze and recommend secure technical solutions for network/system connections to individuals, contractors, vendors, and business partners.

• Architect, design, implement, support, and evaluate cybersecurity-focused tools and services.

• Administer and analyze data from network security devices and services to prevent security threats and reduce risk. 

• Provide periodic security reporting.

• Partner with IT teams and third-party vendors to identify and provide secure IT solutions.

• Develop and implement security policies and procedures involving network security architecture, network access, and monitoring. 

• Ensure all policies defined by management related to change control, security, and segregation of duties are strictly adhered to.

• Lead project teams for new system implementations and significant changes to existing systems to ensure that compliance requirements and critical risks are adequately addressed.

• Remain current with cybersecurity trends and threats.

• Identify those that pose a risk to systems, and develop, and implement appropriate responses.

• Review and approve change management requests related to security technologies

• Function in a leadership role within IT to promote a consistent management and departmental direction and philosophy to positively impact staff morale.

• Other duties as assigned.

Skills and Experience

• Experience with cybersecurity toolsets such as: Armis, Cisco Secure Email, Cisco Umbrella, Crowdstrike, CyberArk, Duo, Imprivata, Nessus, Palo Alto, Securelink, Symantec VIP, Varonis, Valimail, MS Defender, MS Intune, and VMware WS1.

• Skill in applying and incorporating information technologies into proposed solutions.

• Skill in designing the integration of hardware and software solutions.

• Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.

• Skill to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).

• Knowledge of computer networking concepts and protocols, and network security methodologies.

• Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).

• Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.

• Knowledge of cybersecurity and privacy principles.

• Knowledge of cyber threats and vulnerabilities.

• Knowledge of specific operational impacts of cybersecurity lapses.

• Knowledge of enterprise information security architecture.

• Knowledge of evaluation and validation requirements.

• Knowledge of cybersecurity and privacy principles and organizational requirements (relevant to con