[Hiring] Operational Security Manager @Fortified Health Security

Role Description

The Operational Security Manager provides operational and technical leadership for the delivery of cybersecurity services and security program execution across client organizations, with an emphasis on healthcare and other highly regulated environments. This position is accountable for:

• Security service delivery
• Security resource management
• Operational risk reduction
• Vulnerability management governance
• Incident readiness
• Policy governance
• Security operational effectiveness
• Coordination of cybersecurity activities across internal resources, client stakeholders, managed service providers, and third-party partners

The Operational Security Manager serves as the primary technical leader responsible for:

• Assigning security resources
• Establishing security priorities
• Coordinating security workstreams
• Ensuring cybersecurity initiatives align with organizational risk-management objectives

This role supervises security analysts and engineers and acts as the primary operational security liaison between client leadership, technical teams, governance stakeholders, and security service providers.

Qualifications

• 8+ years of cybersecurity experience
• 3+ years managing security personnel
• Healthcare experience preferred
• Strong knowledge of cybersecurity operations, managed security services, incident response, vulnerability management, risk management, and security governance
• Ability to coordinate complex security workstreams across various stakeholders
• Ability to translate technical security findings into business-relevant risk statements
• Working knowledge of healthcare cybersecurity, HIPAA Security Rule expectations, NIST CSF, security policies and standards, data protection concepts, and third-party risk oversight preferred

Requirements

• Required Certifications: CISSP or CISM
• Preferred Certifications: Cloud security certification (e.g., CCSP or AZ-500), Incident response certification (e.g., GCIH)

Benefits

• Equal Opportunity Employer
• Reasonable accommodations for qualified individuals with disabilities

Essential Job Functions

• Lead daily cybersecurity operations across assigned client environments
• Supervise security analysts, engineers, and specialized security resources
• Manage cybersecurity resource allocation across operational, strategic, and project-related activities
• Oversee the vulnerability and exposure management lifecycle
• Coordinate incident response activities and escalation processes
• Support governance, risk, and compliance activities
• Oversee managed security service delivery and service quality
• Coordinate data protection and privacy-related security activities
• Lead security awareness and training initiatives
• Monitor third-party and vendor security risks
• Provide operational security reporting to leadership and client stakeholders
• Lead threat intelligence and threat-informed defense activities
• Oversee the operational effectiveness of security technologies and managed security platforms
• Participate in security architecture reviews and strategic technology initiatives
• Support cybersecurity-related business continuity and disaster recovery planning
• Develop, maintain, and report cybersecurity operational metrics

Working Conditions & Travel Requirements

• Work is generally performed in an office or remote professional environment
• May require participation in incident-response activities outside standard business hours
• Travel may be required based on client, operational, meeting, assessment, or incident-response needs