Security Operations Manager

GetixHealth · via Himalayas ·

Budget / Salary$130,000–153,000
TypeFull-time job
LocationUnited States
Posted1 day ago
GetixHealth is seeking an experienced Security Operations Manager to lead the day-to-day Cybersecurity Operations Program and protect the confidentiality, integrity, and availability of company and client information within a healthcare revenue cycle management environment.
This role will oversee security monitoring, incident detection and response, vulnerability management, threat intelligence, endpoint operations, and the continuous improvement of security controls. The Security Operations Manager will also play a critical role in protecting ePHI, PII, financial information, client data, and other sensitive information while partnering with IT, Infrastructure, GRC, Compliance, Privacy, Legal, and executive leadership.
Location: Remote
Department: Information Technology
Compensation: $130,000–$153,000 annually
Position Type: Full-Time
Travel: Up to 10%, as needed
Key Responsibilities:

Lead the organization’s Security Operations function, including monitoring, detection, investigation, escalation, containment, and remediation

Oversee SIEM, EDR/XDR, email security, vulnerability management, threat intelligence, and related security technologies

Develop and maintain security alerts, detection rules, dashboards, use cases, and escalation procedures

Lead cybersecurity incident response activities, including investigation, containment, recovery, and post-incident review

Maintain and test cybersecurity incident response plans and supporting playbooks

Lead the vulnerability management lifecycle across servers, endpoints, applications, cloud environments, and network infrastructure

Establish risk-based vulnerability prioritization and remediation standards

Monitor emerging cybersecurity threats and coordinate proactive threat-hunting activities

Identify risks related to ransomware, phishing, business email compromise, credential theft, insider threats, and healthcare data theft

Strengthen identity and access security, including privileged access, MFA, conditional access, and account monitoring

Support security monitoring and response across cloud platforms and SaaS environments

Support compliance with HIPAA, HITRUST, SOC 2, PCI DSS, client security requirements, and other applicable frameworks

Partner with Privacy, Compliance, Legal, and Risk teams on investigations involving sensitive or regulated information

Lead, mentor, and develop Security Operations personnel

Establish on-call procedures, incident escalation paths, and after-hours response processes

Manage security technology vendors, managed security service providers, and incident response partners

Develop operational dashboards and reports for Information Security and executive leadership

Track key security and risk indicators, including incident response times, vulnerability remediation, endpoint coverage, phishing trends, and security control effectiveness

Qualifications:

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field, or equivalent education and relevant experience

8+ years of progressive cybersecurity or information security experience

3+ years of experience leading security operations, incident response, security engineering, or a comparable cybersecurity function

Demonstrated experience managing cybersecurity incidents across multiple technical and business teams

Strong working knowledge of:
SIEM and security monitoring

EDR/XDR technologies

Incident response

Vulnerability management

Identity and access security

Network security

Email security

AI security

Threat intelligence

Security logging and detection

Experience operating security programs in environments handling sensitive or regulated information

Knowledge of common attack techniques and frameworks such as MITRE ATT&CK

Strong analytical, investigative, organizational, and problem-solving skills

Ability to communicate complex cybersecurity issues clearly to both technical and non-technical stakeholders

Strong organizational and strategic planning skills

Ability to meet deadlines, manage multiple priorities, and solve complex issues

What We’re Looking For:

Strong incident response expertise

A highly curious and investigative mindset

A passion for cybersecurity and staying current with emerging threats and technologies

Strong leadership and team development skills

Ability to balance technical depth with strategic thinking

Comfortable working in a fast-paced, performance-driven environment

Ability to collaborate across IT, Compliance, Legal, Privacy, Risk, and executive leadership

Benefits & Incentives:

Comprehensive Health Benefits: Medical, dental, and vision plan options

Life & Disability Coverage: Company-paid Basic Life and AD&D, short-term disability, and long-term disability coverage

401(k) Retirement Plan: Retirement savings plan with company match

Paid Time Off: PTO accrual beginning on your first day of employment

Flexible Benefit Options: Benefit choices designed to support individual and family needs

About GetixHealth:
Founded in 1992, GetixHealth is a leading provider of healthcare revenue cycle management services. We partner with healthcare organizations to improve financial performance, operational efficiency, compliance, and the patient financial experience.
Additional Notes:
This role profile is not intended to be an exhaustive list of qualifications, skills, duties, responsibilities, or working conditions associated with the position.
GetixHealth is an equal employment opportunity employer and participates in E-Verify.
Originally posted on Himalayas
security-operations-manager cybersecurity infosec security-operations incident-response security-operations-center-manager operational-security-manager cybersecurity-operations-manager security-operations-centre-manager enterprise-security-operations-manager security-operations-lead
Apply on Himalayas →

Job sourced from Himalayas. Applications happen directly on the original platform — we never collect your data.