[Remote] Cybersecurity Manager
Note: The job is a remote job and is open to candidates in USA. Honest Health is a company focused on transforming primary care through purpose and partnership. They are seeking a seasoned cybersecurity professional to manage incidents, develop awareness programs, and collaborate with stakeholders to enhance cybersecurity practices within the organization.
Responsibilities
ā¢ Lead and manage the company's incident response processes and team members as the organization grows
ā¢ Develop, implement, and maintain incident response plans and procedures
ā¢ Coordinate and conduct incident response activities, including detection, analysis, containment, eradication, and recovery
ā¢ Investigate security incidents to determine root cause and implement corrective actions
ā¢ Ensure timely and effective communication with stakeholders during security incidents
ā¢ Operate and improve core security controls (IAM, endpoint security, logging, monitoring, vulnerability management)
ā¢ Partner with IT and Platform teams to implement practical, scalable security controls
ā¢ Help mature cloud and application security practices (least privilege, secure defaults, audit logging)
ā¢ Develop and implement cybersecurity awareness training programs for team members
ā¢ Promote a culture of cybersecurity awareness and best practices throughout the organization
ā¢ Monitor and measure the effectiveness of cybersecurity awareness initiatives
ā¢ Ensure compliance with HIPAA regulations and standards
ā¢ Develop, implement, and maintain policies and procedures to protect the confidentiality, integrity, and availability of protected health information (PHI)
ā¢ Conduct regular audits and assessments to ensure HIPAA compliance
ā¢ Coordinate closely with the Managed Security Service Provider (MSSP) to ensure seamless integration and operation of the Security Operations Center (SOC) and Security Information and Event Management (SIEM) solution
ā¢ Collaborate with the MSSP to define and refine alerting thresholds, response procedures, and escalation paths to effectively address security incidents
ā¢ Provide direction and guidance to both internal incident response teams and external MSSP/SOC analysts during security incident escalations and threat hunting initiatives
ā¢ Participate in vendor security reviews and risk assessments
ā¢ Lead cross-functional incident response efforts, bringing together teams from IT, legal, compliance, and other departments to coordinate response activities and mitigate security risks effectively
ā¢ Perform other related responsibilities as assigned
Skills
ā¢ Bachelor's degree in computer science, information technology, cybersecurity, or a related field is required; Master's degree considered a plus
ā¢ 5+ years of experience in cybersecurity incident response, threat hunting, and cybersecurity awareness
ā¢ Strong knowledge of cybersecurity frameworks, standards, and best practices (e.g., NIST CSF, ISO 27001, HIPAA)
ā¢ Experience with incident response tools and technologies
ā¢ Excellent communication, leadership, and problem-solving skills
ā¢ Relevant certifications (e.g., CISSP, CISM, GIAC)
Benefits
ā¢ Short-term incentives
ā¢ Comprehensive benefits package
Company Overview
ā¢ Honest Health is the leader in primary care transformation. It was founded in undefined, and is headquartered in Nashville, US, with a workforce of 201-500 employees. Its website is https://honesthealth.com.
Apply Now
Apply Now
Responsibilities
ā¢ Lead and manage the company's incident response processes and team members as the organization grows
ā¢ Develop, implement, and maintain incident response plans and procedures
ā¢ Coordinate and conduct incident response activities, including detection, analysis, containment, eradication, and recovery
ā¢ Investigate security incidents to determine root cause and implement corrective actions
ā¢ Ensure timely and effective communication with stakeholders during security incidents
ā¢ Operate and improve core security controls (IAM, endpoint security, logging, monitoring, vulnerability management)
ā¢ Partner with IT and Platform teams to implement practical, scalable security controls
ā¢ Help mature cloud and application security practices (least privilege, secure defaults, audit logging)
ā¢ Develop and implement cybersecurity awareness training programs for team members
ā¢ Promote a culture of cybersecurity awareness and best practices throughout the organization
ā¢ Monitor and measure the effectiveness of cybersecurity awareness initiatives
ā¢ Ensure compliance with HIPAA regulations and standards
ā¢ Develop, implement, and maintain policies and procedures to protect the confidentiality, integrity, and availability of protected health information (PHI)
ā¢ Conduct regular audits and assessments to ensure HIPAA compliance
ā¢ Coordinate closely with the Managed Security Service Provider (MSSP) to ensure seamless integration and operation of the Security Operations Center (SOC) and Security Information and Event Management (SIEM) solution
ā¢ Collaborate with the MSSP to define and refine alerting thresholds, response procedures, and escalation paths to effectively address security incidents
ā¢ Provide direction and guidance to both internal incident response teams and external MSSP/SOC analysts during security incident escalations and threat hunting initiatives
ā¢ Participate in vendor security reviews and risk assessments
ā¢ Lead cross-functional incident response efforts, bringing together teams from IT, legal, compliance, and other departments to coordinate response activities and mitigate security risks effectively
ā¢ Perform other related responsibilities as assigned
Skills
ā¢ Bachelor's degree in computer science, information technology, cybersecurity, or a related field is required; Master's degree considered a plus
ā¢ 5+ years of experience in cybersecurity incident response, threat hunting, and cybersecurity awareness
ā¢ Strong knowledge of cybersecurity frameworks, standards, and best practices (e.g., NIST CSF, ISO 27001, HIPAA)
ā¢ Experience with incident response tools and technologies
ā¢ Excellent communication, leadership, and problem-solving skills
ā¢ Relevant certifications (e.g., CISSP, CISM, GIAC)
Benefits
ā¢ Short-term incentives
ā¢ Comprehensive benefits package
Company Overview
ā¢ Honest Health is the leader in primary care transformation. It was founded in undefined, and is headquartered in Nashville, US, with a workforce of 201-500 employees. Its website is https://honesthealth.com.
Apply Now
Apply Now