Information Security ManagerDepartment: Information Technology / Security
Reports to: VP of IT or Director of Information Security
Location: Remote
Employment type: Full-time
Position SummaryThe Information Security Manager leads the organization's security operations and risk program. The role oversees security monitoring and incident response, manages the SOC and its vendors, reports on security posture to executive leadership, and ensures the organization meets its compliance and audit obligations. It combines hands-on operational oversight with governance and communication.
Key ResponsibilitiesSecurity Monitoring and Incident Response- Oversee 24/7 security monitoring and threat detection, and review, validate, and prioritize alerts from the managed SOC, SIEM, EDR/XDR, identity, email, and network security tools.
- Act as the internal escalation point for security incidents, including phishing, malware, account compromise, data exposure, and policy violations.
- Lead incident response from detection through containment, eradication, recovery, and post-incident review.
- Coordinate remediation with IT Operations, Helpdesk, M365 and network teams, legal, HR, communications, and third-party vendors.
- Maintain detailed incident documentation, timelines, and post-incident summaries.
- Maintain and test incident response plans, runbooks, and tabletop exercises.
SOC and Vendor Management- Manage the internal or outsourced SOC, including MSSP and MDR providers, and serve as the primary technical point of contact for the managed SOC/MDR provider.
- Validate SOC findings, challenge false positives, and ensure alerts are actionable and risk-based.
- Participate in tuning discussions to improve alert quality and reduce noise.
- Define, monitor, and enforce vendor SLAs, ensuring incidents meet defined response expectations.
- Evaluate and select security vendors and tools, and manage contracts, renewals, and budgets.
- Conduct regular vendor reviews and escalate performance issues.
Reporting and Executive Communication- Produce recurring security reports for the VP of IT, executive leadership, and board members, including incident summaries, threat trends and metrics, and risk posture and exposure overview.
- Translate technical security data into clear, non-technical business risk language to support decision-making and budget requests.
- Provide ad-hoc briefings following significant incidents or emerging threats.
Risk, Compliance, and Continuous Improvement- Run risk assessments and maintain the risk register and remediation tracking.
- Ensure alignment with applicable frameworks and regulations (e.g., HIPAA, NIST CSF, ISO 27001, SOC 2, PCI DSS, as relevant), including providing operational evidence, incident data, and security metrics to support compliance efforts.
- Develop and maintain security policies, standards, procedures, and runbooks.
- Identify recurring issues, control gaps, and opportunities to improve detection, response, and remediation processes.
- Partner with IT leadership to improve overall security maturity and drive the security roadmap.
- Lead security awareness and training initiatives.
Audits- Serve as the primary contact for internal, external, and regulatory audits.
- Coordinate evidence collection, control testing, and responses to audit findings.
- Track remediation of audit findings through to closure.
Required Qualifications- Bachelor's degree in Information Security, Computer Science, Information Technology, or equivalent experience.
- 6-10 years of experience in cybersecurity, security operations, or incident response, including at least 2 years in a lead or management role.
- Proven experience responding to real-world security incidents and hands-on SOC operations experience.
- Hands-on experience with SIEM platforms (e.g., Microsoft Sentinel, Splunk, LogRhythm), EDR/XDR solutions (e.g., Microsoft Defender, CrowdStrike), and email security, identity security, and endpoint tools.
- Experience managing third-party security vendors and service providers.
- Working knowledge of HIPAA, PHI protection, and healthcare security expectations, as well as other security frameworks and compliance requirements.
- Experience supporting audits and managing remediation.
- Strong written and verbal communication skills, including the ability to produce executive-level summaries.
- Ability to work independently and exercise sound judgment during security events.
Preferred Qualifications- Experience working with a managed SOC or MDR provider.
- Healthcare or other regulated-industry background (e.g., finance, government).
- Microsoft 365 security experience (Defender, Entra ID, Purview, etc.).
- Experience with vulnerability management platforms and cloud security (AWS, Azure, or GCP).
- Relevant certifications (preferred, not required): CISSP, CISM, CISA, CRISC, GCIA, GCED, GCIH, Security+, SC-200 or similar.
- Master's degree or MBA.
Core Competencies- Leadership and team development
- Incident ownership and decision-making
- Risk-based thinking
- Clear executive communication
- Calm, methodical response under pressure
- Strong collaboration across IT and leadership teams
- Vendor and budget management
- Strategic thinking and process improvement
Working Conditions- Participation in an on-call rotation for security incidents.
- Occasional travel for audits, vendor meetings, or conferences [if applicable].
