Cybersecurity Manager | Full Time | Days | In Office Position

This position is an in-office position.

Summary

Under the general direction of the Chief Information Security Officer, the Cybersecurity Manager is responsible for implementing, and contributing to the development of, an organization's cybersecurity strategy, implementing security measures, and ensuring compliance with relevant regulations. They lead teams, develop security policies, and respond to incidents, while also staying informed about the latest cyber threats. 

Required Skills and Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field.

• Demonstrable experience as a Cybersecurity Manager, or similar role, and at least 5 years in cybersecurity overall.

• Extensive knowledge of regional and global cybersecurity frameworks, such as NIST, ISO 27001, SOC 2, and CIS Controls.

• Experience in data protection and cybersecurity, including incident management, security incident response frameworks, and disaster recovery planning.

• Proficiency in security technologies and tools, including SIEM, firewalls, VPNs, data encryption protocols, and anti-malware solutions.

• Strong understanding of HIPAA, or similar data privacy regulations.

• Hands-on experience with vulnerability assessments, penetration testing, and ethical hacking.

• Strong leadership and team management skills, with experience leading cybersecurity initiatives.

• Solid analytical and problem-solving skills, with the ability to identify and mitigate data security risks.

• Excellent communication skills, with the ability to work cross-functionally with IT, clinical, legal, and business stakeholders.

Preferred Skills and Qualifications

• Relevant certification in cybersecurity, such as CISSP, CISM, or CEH.

• Experience with cloud security, securing hybrid environments, and endpoint protection.

• Experience with regulatory compliance related to cybersecurity and data privacy laws.

• Knowledge of threat intelligence platforms and advanced persistent threats (APT).

• Familiarity with Zero Trust Architecture and its implementation.

• Expertise in threat modelling, risk management, and securing biomedical systems.

• Contributions to open-source security projects or research publications.

Key Responsibilities

• Lead and manage cybersecurity team: This involves hiring, training, and mentoring cybersecurity professionals, as well as managing their performance.

• Oversee cybersecurity budgets: This includes developing, managing, and tracking budgets related to security initiatives and technologies. 

• Conduct risk assessments: Identifying potential vulnerabilities and threats to the organization's systems and data. 

• Implement security measures: Deploying firewalls, intrusion detection systems, and other security technologies to protect against cyber threats. 

• Monitor and respond to security incidents: Identifying, containing, and recovering from security breaches and other cyber incidents. 

• Ensure compliance with regulations: Staying current on relevant regulations and ensuring that the organization's security practices are compliant. 

• Develop and maintain security policies: Creating and updating policies that govern the organization's cybersecurity practices. 

• Work with other departments: Collaborating with other departments to ensure that cybersecurity is integrated into the organization's overall operations. 

• Evaluate and implement appropriate security technologies: Staying current on the latest security tools and technologies and recommending them for implementation. 

• Monitor security trends and threats: Staying informed about the latest cyber threats and adjusting the organization's security posture accordingly. 

• Communicate cybersecurity information: Communicating cybersecurity information to both internal and external stakeholders. This includes educating employees on cybersecurity best practices and how to protect themselves from cyber threats.  

• Provide reports to management: Providing regular reports to management on the organization's cybersecurity posture and progress. 

Concord Hospital is an Equal Employment Opportunity employer. It is our policy to provide equal opportunity to all employees and applicants and to prohibit any discrimination because of race, color, religion, sex, sexual orientation, gender, gender identity, national origin, age, marital status, genetic information, disability or protected veteran status.

Know Your Rights: Workplace Discrimination is Illegal

Applicants to and employees of this company are protected under federal law from discrimination on several bases. Follow the link above to find out more.

If you are an individual with a disability and require a reasonable accommodation to complete any part of the application process, you may contact Human Resources at 603-230-7269.

Physical and Work Requirements

The physical demands and characteristics of the work environment described here are representative of those that will be encountered by an employee to successfully perform the essential functions of this job.

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

The Dictionary of Occupational Titles Material Handling Classification is SEDENTARY. The employee must regularly lift, carry or push/pull less than 10 pounds, frequently lift, carry or push/pull less than 10 pounds, and occasionally lift, carry or push/pull up to 10 pounds.

While performing the duties of this Job, the employee is regularly required to sit. The employee is frequently required to hear, perform activities that require fine motor skills, and speak. The employee is occasionally required to bend, do repetitive motion, kneel, reach, squat, stand, and walk.

Specific vision abilities required by this job include depth perception, far vision, near vision, and peripheral vision.

The noise level in the work environment is usually quiet.