Manager of Enterprise Security Services

At Definitive Healthcare, our passion is to transform data, analytics and expertise into healthcare commercial intelligence. We help clients uncover the right markets, opportunities and people, so they can shape tomorrow’s healthcare industry. Our SaaS platform creates new paths to commercial success in the healthcare market, so companies can identify where to go next.  

Our employees are kind, collaborative, energetic, approachable and driven. On top of that, we value the unique perspectives, backgrounds and voices of our employees. Why? Because their diverse experiences drive new ideas and help us build a better community. 

For over 10 years, we’ve built a collaborative culture driven by employees who share a passion for improving the healthcare ecosystem, enjoy giving back to the local community and value diversity and inclusion.  

One of the hallmarks of our culture is our commitment to community service. Through the DefinitiveCares program, employees can work with their choice of more than 40 charitable organizations, supporting causes from hunger and homelessness to healthcare, LGBTQ+ issues, racial justice, women’s initiatives and more. 2021 marked the sixth year that we had 100% employee participation in DefinitiveCares. 

We also provide a range of opportunities for employees to connect with each other. Employees can join any of our employee run affinity groups supporting causes such as women’s empowerment, LGBTQ+, Black, indigenous and people of color (BIPOC), disabilities and working parents and potential for many more. Affinity groups often enable greater education companywide through training, events and speaker series. 

We’re also a great place to work. For five years in a row, we’ve been recognized by the Boston Business Journal and the Boston Globe as a best place to work in Massachusetts. In 2022, Energage recognized us for Culture Excellence in Compensation & Benefits, Innovation, Great Leadership, Purpose & Value and Work-Life Flexibility! 

Think you’d be a good addition to our team? Explore our available positions here. We’d love the chance to get to know you.  

Summary:

We are seeking an experienced and dedicated Manager of Enterprise Security Services to oversee the development, implementation, and management of our organization's information security program. The ideal candidate will be a strategic thinker with excellent leadership skills and a strong background in information security, risk management, and compliance.

Responsibilities:

• Develop, implement, and maintain a comprehensive information security program, ensuring that the organization's assets and data are protected from internal and external threats.
• Provide leadership and direction to the security team, including hiring, training, and performance management.
• Collaborate with key stakeholders across the organization to establish security policies, procedures, and standards that align with business objectives and regulatory requirements.
• Oversee security incident response and remediation efforts, ensuring timely resolution and communication of security events.
• Conduct regular security assessments, audits, and penetration tests to identify vulnerabilities and areas for improvement.
• Develop and manage the security budget, ensuring that resources are allocated effectively to address the organization's security needs.
• Stay current on emerging security trends, technologies, and regulatory requirements, and make recommendations for improvements to the organization's security program.
• Work closely with the IT department to integrate security best practices into the organization's network infrastructure, systems, and applications.
• Coordinate with legal and compliance teams to ensure that the organization's security program is in compliance with relevant laws, regulations, and industry standards.
• Develop and deliver security awareness training programs for employees at all levels of the organization.

Requirements:

• Bachelor's degree in Information Security, Computer Science, or a related field; a Master's degree is preferred. Equivalent relevant experience may also be considered.
• Minimum of 7 years of experience in information security, with at least 3 years in a leadership role.
• Professional certifications such as CISSP, CISM, or CISA are highly desirable.
• Strong understanding of information security principles, best practices, and technologies, including firewalls, intrusion detection/prevention systems, encryption, and access control.
• Experience with security frameworks and standards such as ISO 27001, NIST, and CIS.
• Familiarity with privacy regulations such as GDPR, HIPAA, and CCPA.
• Excellent communication and presentation skills, with the ability to effectively convey c