IT Cybersecurity Manager

Reporting to the Vice President, Data & Technology, the IT Cybersecurity Manager will monitor, analyze and detect cyber events and incises within information systems and networks.

Typical duties include but are not limited to: Strategic Leadership & Compliance

• Prepare and deliver comprehensive security posture and risk assessment presentations to organization stakeholders. Apply deep knowledge of Cybersecurity Insurance requirements to ensure policy compliance and continuous coverage.
• Act as the primary technical liaison with Wipfli Cybersecurity vendor for co-managed services and audits.
• Develop and enforce AI Security policies to protect proprietary information from unauthorized exposure to public AI models
• Monitor networks, systems, applications, and infrastructure for threats using SIEM, IDS/IPS, EDR, and related tools.
• Investigate and respond to security incidents, breaches, and malware infections, ensuring timely remediation and reporting.
• Provide after-hours incident response as part of an on-call rotation.
• Perform vulnerability scanning, assessment, remediation, and penetration testing (e.g., Nessus, Wazuh).
• Conduct risk assessments and recommend mitigation strategies to reduce exposure to cyber threats.
• Patch, update, and harden systems to address vulnerabilities and operational risks.
• Create and maintain the enterprise’s security architecture design.
• Implement and maintain security technologies including firewalls, access controls, IDS/IPS, endpoint protection, and DLP.
• Manage IAM functions, including Active Directory authentication, authorization, and account security.
• Support CI/CD security processes, including analysis, testing, and deployment.
• Maintain up-to-date knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors.
• Configure, deploy, migrate, and troubleshoot VMware and Microsoft Hyper‑V environments, including load balancing, NIC teaming, and failover.
• Maintain network equipment and core IT infrastructure to ensure secure, reliable operations.
• Automate operational and security tasks using PowerShell and other scripting tools.
• Develop, maintain, and enforce cybersecurity policies, standards, and procedures.
• Deliver cybersecurity awareness programs, training, and workshops to promote a security-first culture.
• Work with internal teams and external vendors to implement security best practices and evaluate new technologies.
• Identify system or workflow deficiencies and recommend improvements.
• Contribute to planning, development, and deployment of major IT and cybersecurity projects.
• Provide expertise in workflow design, system architecture, testing, and implementation.
• Bachelor’s degree in Cybersecurity, Computer Science, IT, or related field required, Master’s Degree preferred.
• Industry certifications preferred (e.g., security, cloud, security +, or infrastructure-focused).
• A minimum of 5 years of progressive experience in cybersecurity or IT operations.
• Healthcare environment experience preferred, including familiarity with HIPAA/PHI requirements.
• Hands-on experience with security monitoring, incident response, and threat mitigation.
• Proficient with Microsoft Windows 11, Windows Server, and Microsoft 365/Office 365 security tools.
• Expert proficiency with SIEM, Nessus, Bloodhound, and ESET tools
• Strong understanding of OS security, IAM, Active Directory, authentication, and access control.
• Solid networking knowledge: TCP/IP, DNS, VPNs, firewalls, routers, switches, and cabling.
• Experience managing and supporting cybersecurity technologies (EDR, SIEM, IDS/IPS, DLP, firewalls).
• Familiarity with common attack vectors (malware, phishing, social engineering) and encryption methods.
• Ability to configure, monitor, and maintain security systems to detect and mitigate threats.
• Strong analytical thinking, problem-solving, and attention to detail.
• Demonstrated curiosity, initiative, and a proactive approach to identifying risks and improvements.
• Effective written and verbal communication skills, including documentation and translating technical concepts for non-technical audiences.
• Ability to work independently and collaboratively in a team-oriented environment.