Role Description:
The Senior Manager of Cyber Security is a senior operational leader within the global Information Technology organization. Based in Raleigh, North Carolina US office, this role leads the day-to-day delivery and continuous improvement of Clinisys' cyber security program across corporate technology, cloud and SaaS environments, products, and customer-facing services. The role translates cyber strategy, risk priorities, regulatory obligations, and customer commitments into clear plans, accountable execution, and measurable outcomes.
Working closely with the VP of IT / CIO | CISO, the Senior Manager will lead and develop cyber security professionals, coordinate activity across technology and business teams, and act as a trusted escalation point for cyber risk, incidents, control weaknesses, and remediation. The role combines people leadership, program ownership, and hands-on management oversight. Enterprise cyber strategy, final risk acceptance, and executive accountability remains with the CIO | CISO.
Responsibilities:
Cyber Security Operations and Incident Management
• Lead the effective operation of security monitoring, alert triage, detection, investigation, response, and escalation processes across corporate, cloud, product, and customer service environments.
• Maintain and exercise cyber incident response plans and playbooks, coordinating technical teams and partners during significant incidents and ensuring timely containment, evidence preservation, root cause analysis, communications support, and corrective actions.
• Oversee internal and outsourced security services, including service performance, monitoring coverage, alert quality, escalation paths, case management, and follow-through on identified improvements.
• Provide clear operational reporting on incidents, vulnerabilities, control health, remediation progress, recurring themes, and emerging threats; escalate material risks or delays promptly.
• Participate in an appropriate leadership escalation rotation and support time-sensitive cyber incidents outside standard working hours when required.
Governance, Risk and Compliance
• Operationalize the cyber security strategy, roadmap, policies, standards, and control framework established by the CIO | CISO, translating objectives into prioritized delivery plans and accountable workstreams.
• Manage cyber risk and control-assurance activities, ensuring risks are clearly documented, assessed, assigned to accountable owners, supported by treatment plans, and escalated where exposure exceeds agreed tolerance.
• Coordinate evidence, remediation, and continuous-compliance activities supporting ISO 27001, SOC 2, Cyber Essentials Plus, GDPR, NHS requirements, customer obligations, Roper Technologies control criteria, and other applicable standards or attestations.
• Partner with Legal, Privacy, Compliance, Internal Audit, and business stakeholders to ensure security requirements are understood, implemented, evidenced, and maintained.
• Lead or support internal and external audits, control assessments, customer reviews, penetration-test follow-up, and regulatory or contractual assurance activities.
Vulnerability, Cloud and Technology Security
• Oversee vulnerability management across infrastructure, endpoints, cloud services, applications, and products, including scanning coverage, risk-based prioritization, remediation tracking, exception management, and reporting.
• Coordinate independent penetration testing and security assessments; ensure findings are translated into practical remediation plans with clear owners, target dates, and escalation for overdue high-risk items.
• Partner with IT Operations, Cloud Operations, Enterprise Architecture, Product, and Engineering teams to embed proportionate security review into architecture, change, deployment, and operational processes.
• Promote effective controls for identity and access management, privileged access, multi-factor authentication, endpoint protection, logging, encryption, configuration management, backup protection, and secure cloud operation.
• Support secure-by-design and privacy-by-design practices across SaaS, software development, APIs, integrations, and DevOps delivery, including pragmatic use of automated security testing and release risk criteria.
Third-Party Risk and Customer Assurance
• Manage cyber security due diligence and ongoing assurance for critical suppliers, cloud providers, technology partners, and other third parties that access Clinisys systems, products, or sensitive information.
• Ensure identified supplier risks, exceptions, contractual commitments, and remediation actions are documented, assigned, monitored, and escalated appropriately.
• Support strategic customer assurance, security questionnaires, audits, due diligence, and sales engagements with accurate, consistent, and reusable evidence.
• Work with Sales, Legal, Product, and Compliance to ensure customer security commitments are achievable, approved, and reflected in operational controls.
Leadership, Delivery and Continuous Improvement
• Lead, coach, and develop a globally distributed cyber security team, establishing clear priorities, objectives, decision rights, service ownership, performance expectations, and development plans.
• Manage delivery across the cyber security portfolio, balancing operational demands, risk reduction, audit commitments, projects, and team capacity; surface dependencies and trade-offs early.
• Support workforce planning, supplier management, budget forecasting, tooling lifecycle decisions, and business cases for cyber security investment.
• Establish a disciplined operating rhythm for incidents, risks, vulnerabilities, audits, projects, metrics, and team development, with concise updates for the CIO | CISO and governance forums.
• Drive continuous improvement through process standardization, automation, data quality, control rationalization, and responsible use of AI-enabled security capabilities.
• Champion a practical security culture by providing trusted guidance, strengthening role-based awareness, and helping teams make informed risk decisions without creating unnecessary friction.
Local Functions:
• This role is based in the Clinisys Raleigh, North Carolina office and will operate on a hybrid basis in line with company policy and business needs.
• Regular collaboration across global time zones is required, with occasional travel to other Clinisys offices, customer locations, suppliers, or company events.
• The role requires flexibility to support significant cyber incidents and urgent business needs outside normal working hours.
Knowledge, Skills & Abilities:
Skills Needed to Be Successful
• Broad practical knowledge across security operations, incident response, governance, risk and compliance, vulnerability management, cloud security, identity, application security, third-party risk, and customer assurance.
• Demonstrated ability to lead engineers, analysts, and compliance professionals, including setting direction, managing performance, developing capability, and creating accountability across locations.
• Ability to translate technical findings, regulatory obligations, and security frameworks into prioritized actions, measurable plans, and concise business risk reporting.
• Strong judgment under pressure, with the ability to coordinate complex incidents, make timely recommendations, and escalate material risk appropriately.
• Credible stakeholder management and communication skills with executives, auditors, customers, parent-company stakeholders, suppliers, product leaders, and technical teams.
• Commercial and customer-trust mindset, balancing risk reduction, regulatory obligations, delivery speed, usability, and cost.
• Organized and outcome-focused approach to portfolio delivery, metrics, remediation governance, supplier performance, and team operations.
Required Experience & Education:
• Typically 8 or more years of progressive experience in cyber security, information security, technology risk, or a related discipline, including substantial people-management and operational leadership responsibility.
• Experience leading multiple cyber security disciplines, a significant security program, or a security operations function within a global SaaS, software, healthcare technology, life sciences, or similarly regulated organization.
• Practical experience with ISO 27001, SOC 2, GDPR, NIST Cybersecurity Framework, Cyber Essentials Plus, secure software development, cloud security, and risk-based control improvement.
• Demonstrated experience managing significant security incidents, audits or certifications, penetration testing, vulnerability remediation, third-party security risk, and executive-level reporting.
• Bachelor's degree in Cyber Security, Computer Science, Information Systems, Engineering, or a related field, or equivalent relevant professional experience.
• One or more recognized security certifications such as CISSP, CISM, CRISC, CISA, CCSP, or equivalent.
Preferred Qualifications:
• Experience in healthcare software, diagnostic or laboratory systems, or environments handling sensitive health and laboratory information.
• Experience working within a multi-company operating model and responding to parent-company control requirements and maturity assessments.
• Knowledge of AWS, Microsoft Azure, modern SaaS architectures, DevSecOps practices, and contemporary security tooling.
• Experience supporting security integration, organizational change, or remediation of acquired and legacy technology environments.
Success Measures:
• Cyber security operations, incidents, vulnerabilities, and remediation activities are managed consistently, transparently, and within agreed risk-based expectations.
• Improvement in control maturity and timely closure of high-risk audit, risk, vulnerability, penetration-test, and assessment findings.
• Required certifications, attestations, and customer trust commitments are supported by accurate, reusable, and audit-ready evidence.
• The cyber security team demonstrates clear accountability, stronger capability, effective collaboration, and dependable delivery across regions.
• Security priorities and investment needs are supported by clear metrics, sound risk analysis, and concise recommendations.
Onboarding:
As part of our onboarding process, new employees will be required to attend or travel to a designated Clinisys office on their first day of employment. Requirements will be confirmed based on work location and are intended to support identity verification, completion of employment documentation, equipment issuance, introductions, and orientation to Clinisys policies and procedures.
Benefits
Our benefits are designed to help you move forward in your career, and in areas of your life outside of work. From health and wellness benefits, 401 (k) Savings Plan, stock incentive programs, paid time off, parental leave, and tuition assistance, we've got you covered with our total rewards package. For part-timers, your coverage will vary as you may be eligible for some of these benefits depending on your individual circumstances.
The starting pay range for a candidate selected for this position is generally within the range of $135,000 to $180,000 for annual base salary. The successful candidate's actual pay will be based on various factors, such as work location, qualifications, and experience, so the actual starting pay may be above or below this range
General Guidance:
This job description describes the responsibilities and accountabilities most often associated with this role. Clinisys may change, reassign, expand, or reduce the scope of responsibilities as business needs evolve.
