Senior Manager - Information Security - Threat Management

Overview

 

US Anesthesia Partners is the highest-quality single-specialty anesthesia practice in the United States, with over 6,000 employees distributed across 12 states. Our clinical and non-clinical staff support each other as they work toward a common vision: Empowering people to advance exceptional care.

 

POSITION SUMMARY: The Senior Manager – Information Security – Threat Management leads cybersecurity operations with responsibility for advanced protection, detection, and response capabilities. Reporting to the Information Security Director, this senior role supervises the Security Operations Center (SOC) and external Managed Security Service Providers (MSSPs), manages enterprise security tools and network architecture, and ensures operational excellence aligned with IT service management (ITSM) best practices. This position is expected to drive strategy, mentor staff at all levels, and influence executive leadership on cybersecurity priorities. The senior manager applies the NIST Cybersecurity Framework (Protect, Detect, Respond) and the MITRE ATT&CK framework to mature enterprise defenses, while ensuring compliance with HIPAA and healthcare industry requirements.

Job Highlights

ESSENTIAL DUTIES AND RESPONSIBILITIES: (The ideal candidate must be able to complete all physical requirements of the job with or without a reasonable accommodation)

 

Leadership & Operational Oversight

• Leads and manages daily security operations, including alerts, escalations, and ticketing, ensuring rapid identification and mitigation of risks.
• Supervises Security Operations and MSSP partners, ensuring high-quality 24/7 monitoring, efficient triage, and continuous improvement of Security Operations processes.
• Serves as Incident Commander, coordinating the enterprise incident response process and directing communication with executive leadership, IT, and business teams.
• Manages and mentors security analysts, and collaborates closely with engineers to foster a culture of continuous improvement and operational readiness.

 

Threat Management & Incident Response

• Oversees threat detection, incident response, and vulnerability management, aligning with NIST CSF and MITRE ATT&CK best practices.
• Leads advanced practices such as threat hunting, red teaming, and adversary emulation to proactively identify emerging threats.
• Directs forensic investigations and ensures lessons learned are integrated into detection and response capabilities.
• Designs and maintains incident response plans and playbooks to ensure consistent and effective crisis management.

 

Security Engineering & Technology Management

• Manages operations of core security operations functions, including SIEM, EDR, cloud/SaaS security controls, email security, DLP, network architecture, authentication, and system hardening.
• Integrates and optimizes security tools and telemetry to enhance operational visibility, improve correlation, and reduce threat dwell time.
• Oversees the monitoring of security systems and logs, leveraging threat intelligence and analytics to quickly identify and investigate potential incidents.
• Directs vulnerability management and penetration testing programs, ensuring timely remediation of identified risks.

 

Cloud, Network, & Application Security

• Maintains secure configuration and continuous compliance across enterprise cloud and productivity platforms, applying zero-trust principles and least-privilege access.

 

Security Awareness & Culture

• Designs and delivers security awareness training programs to strengthen the organization’s security culture.
• Coordinates phishing simulations and gamified campaigns to increase employee reporting of suspicious messages and reduce phishing click rates.

 

Governance, Metrics & Vendor Management

• Ensures alignment of all security operations with IT service management (ITSM) frameworks and enterprise change/control processes.
• Tracks and reports Key Performance Indicators (KPIs) and Key Risk Objectives (KROs), such as Mean Time to Detect (MTTD), Mean Time to Respond (MTTR), vulnerability closure rates, and phishing-reporting metrics.
• Manages security vendor relationships, contracts, and service-level agreements (SLAs) to ensure value delivery and compliance.
• Communicates risks, security posture, and strategic initiatives effectively to cross-functional stakeholders and senior leadership.

Qualifications

KNOWLEDGE/SKI