Senior Manager, IT Security

Role overview Lead a security team while remaining involved in technical execution and customer engagement. The role covers security operations, application and cloud security, audit readiness, and incident coordination, while also helping enterprise customers understand the organization’s security posture. It calls for a player-coach who can guide engineers, work across business functions, and communicate clearly during high-pressure situations.

Responsibilities - Lead and coach specialists across security operations, application security, cloud security, and governance, risk, and compliance. - Oversee security automation, infrastructure hardening, vulnerability management, and patch coordination. - Partner with commercial, legal, and sales teams on security contract terms, proposal responses, and customer security reviews. - Serve as a technical contact for customers during security issues, explaining impact, remediation, and recovery plans alongside technology leadership. - Conduct technical reviews, strengthen secure development practices and deployment pipeline controls, and guide cloud security architecture. - Support audit teams in maintaining technical controls aligned with SOC 2, HITRUST, and NIST, and track operational measures such as remediation times and patch compliance.

Requirements - At least seven years of progressive information security experience, including leading, coaching, or mentoring technical security staff. - Experience engaging directly with enterprise customer security leaders, procurement teams, or health plan security executives. - Background reviewing security contract provisions, supporting enterprise proposals, and presenting security practices to external stakeholders. - Hands-on application security experience, including dynamic testing, secure development lifecycles, or CI/CD controls. - Cloud security architecture experience; containerized and microservice environments are relevant. - Working knowledge of SOC 2, HITRUST, and NIST, with experience implementing controls and supporting auditability. - Strong incident communication skills and ability to collaborate with engineering, product, legal, and executive teams.