IT Security Manager - remote (IL preferred)

BrightStar Care is the nation’s leading home care and medical staffing franchisor, and we are continuing to grow! We have an opportunity for an experienced IT Security Manager on our team.  The IT Security Manager’s role is responsible for identifying, assessing, and managing cyber threats and risk to BrightStar Care’s data and systems both in the cloud and on-premises. The IT Security Manager will also maintain HIPAA compliance as the Security Officer and implement compliant frameworks for HIPAA such as NIST and HITRUST. This position is hands-on and will analyze and ensure applications and systems are secure, conduct 3rd party reviews and audits, define, and execute proper policies, and manage the overall cyber security posture of the organization. The IT Security Manager ensures that when attacks and suspected compromises happen, these incidents are dealt with promptly and effectively to minimize recurrences. This position requires technical ability and is a hands-on role in a Windows-based local environment with a growing Azure/ O365 presence. 

Responsibilities:

• HIPAA Security Officer for the organization.
• Conduct security risk assessments and create mitigation plans.
• Roadmap and manage projects supporting threat and vulnerability management, security risks, cyber risks, and proper access rights/authentication.
• Design, coordinate, and oversee security testing procedures to verify controls for systems, networks, applications, and remediation activities of any identified risks.
• Design and implement technical controls to support and enforce defined security policies.
• Document and update security controls, recovery plans, prepare detailed system security plans, and risk assessments.
• Work directly with external and internal partners to conduct audits, assessments, and penetration tests.
• Perform regular system scans to identify vulnerabilities and work with BTG /vendors to mitigate vulnerabilities.
• Actively monitor SIEM, logs, AV/EDR platforms, to identify and respond to threats and vulnerabilities.
• Work with BTG technology teams to secure O365/ Azure and on-premises environments.
• Support BTG in the incident response process to minimize impact and quickly deliver resolution and communication.
• Manage production issues and incidents and participate in problem and change management.
• Evaluate, update, and track employee security awareness programs are maintained with participation.
• Ensure all data assets are inventoried and secured in a risk-appropriate manner.
• Build, update, and delivery a quarterly security review driven from data and risk probabilities
• Other duties as assigned.

Qualifications:

• Bachelor’s degree or equivalent experience required.
• A minimum of 3 years of applicable experience required.
• Previous experience in security management and compliance in HIPAA environment.
• Previous experience implementing frameworks such as NIST / ISO / HITRUST.
• CISSP, CISA, CRISC, CISM, CGEIT, ISA or other industry certifications desired.
• Knowledge of information security principles and practices, general procedures, and guidelines.
• Experience participating in projects helping to design strategies, drive solutions, and document results.
• Experience with third-party system integrations in a Microsoft Windows environment.
• Knowledge and experience with Windows client/ server and network technology such as Meraki MX firewalls.
• Experience with Azure / O365 security and compliance.  
• Experience with SIEM tools.
• Experience with AV and EDR tools.
• Experience managing third-party security vendors.
• Excellent communication, collaboration, team building, and relationship management skills required.
• Must be able to collaborate with other IT disciplines and business stakeholders for the creation and evaluation of business cases, success criteria, requirements, schedules, quality assurance, training, and communication plans. 
• Must use Microsoft Office and Windows computers.  

Here are some of the perks:

• Medical benefits
• 401k with matching funds
• Paid time off
• Flexible scheduling
• Growth opportunities

Candidate must have demonstrated alignment and experience in successfully living the BrightStar Care Core Values:

• Be Open and Honest: Approachable, Fun, Unflappable, Kind, Empathetic
• Serve with Passion: Help First, Confident Yet Humble, For the Greater Good, Make a Real Difference
• Do the Right Thing: Honest, Ethical, Tell the Truth