Job description

GetixHealth is seeking an experienced Security Operations Manager to lead the day-to-day Cybersecurity Operations Program and protect the confidentiality, integrity, and availability of company and client information within a healthcare revenue cycle management environment. This role will oversee security monitoring, incident detection and response, vulnerability management, threat intelligence, endpoint operations, and the continuous improvement of security controls. The Security Operations Manager will also play a critical role in protecting ePHI, PII, financial information, client data, and other sensitive information while partnering with IT, Infrastructure, GRC, Compliance, Privacy, Legal, and executive leadership. ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Location: Remote Department: Information Technology Compensation: $130,000–$153,000 annually Position Type: Full-Time Travel: Up to 10%, as needed ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Key Responsibilities: • Lead the organization’s Security Operations function, including monitoring, detection, investigation, escalation, containment, and remediation • Oversee SIEM, EDR/XDR, email security, vulnerability management, threat intelligence, and related security technologies • Develop and maintain security alerts, detection rules, dashboards, use cases, and escalation procedures • Lead cybersecurity incident response activities, including investigation, containment, recovery, and post-incident review • Maintain and test cybersecurity incident response plans and supporting playbooks • Lead the vulnerability management lifecycle across servers, endpoints, applications, cloud environments, and network infrastructure • Establish risk-based vulnerability prioritization and remediation standards • Monitor emerging cybersecurity threats and coordinate proactive threat-hunting activities • Identify risks related to ransomware, phishing, business email compromise, credential theft, insider threats, and healthcare data theft • Strengthen identity and access security, including privileged access, MFA, conditional access, and account monitoring • Support security monitoring and response across cloud platforms and SaaS environments • Support compliance with HIPAA, HITRUST, SOC 2, PCI DSS, client security requirements, and other applicable frameworks • Partner with Privacy, Compliance, Legal, and Risk teams on investigations involving sensitive or regulated information • Lead, mentor, and develop Security Operations personnel • Establish on-call procedures, incident escalation paths, and after-hours response processes • Manage security technology vendors, managed security service providers, and incident response partners • Develop operational dashboards and reports for Information Security and executive leadership • Track key security and risk indicators, including incident response times, vulnerability remediation, endpoint coverage, phishing trends, and security control effectiveness Qualifications: • Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field, or equivalent education and relevant experience • 8+ years of progressive cybersecurity or information security experience • 3+ years of experience leading security operations, incident response, security engineering, or a comparable cybersecurity function • Demonstrated experience managing cybersecurity incidents across multiple technical and business teams • Strong working knowledge of: • SIEM and security monitoring • EDR/XDR technologies • Incident response • Vulnerability management • Identity and access security • Network security • Email security • AI security • Threat intelligence • Security logging and detection • Experience operating security programs in environments handling sensitive or regulated information • Knowledge of common attack techniques and frameworks such as MITRE ATT&CK • Strong analytical, investigative, organizational, and problem-solving skills • Ability to communicate complex cybersecurity issues clearly to both technical and non-technical stakeholders • Strong organizational and strategic planning skills • Ability to meet deadlines, manage multiple priorities, and solve complex issues What We’re Looking For: • Strong incident response expertise • A highly curious and investigative mindset • A passion for cybersecurity and staying current with emerging threats and technologies • Strong leadership and team development skills • Ability to balance technical depth with strategic thinking • Comfortable working in a fast-paced, performance-driven environment • Ability to collaborate across IT, Compliance, Legal, Privacy, Risk, and executive leadership Benefits & Incentives: • Comprehensive Health Benefits: Medical, dental, and vision plan options • Life & Disability Coverage: Company-paid Basic Life and AD&D, short-term disability, and long-term disability coverage • 401(k) Retirement Plan: Retirement savings plan with company match • Paid Time Off: PTO accrual beginning on your first day of employment • Flexible Benefit Options: Benefit choices designed to support individual and family needs About GetixHealth: Founded in 1992, GetixHealth is a leading provider of healthcare revenue cycle management services. We partner with healthcare organizations to improve financial performance, operational efficiency, compliance, and the patient financial experience. Additional Notes: This role profile is not intended to be an exhaustive list of qualifications, skills, duties, responsibilities, or working conditions associated with the position. GetixHealth is an equal employment opportunity employer and participates in E-Verify.

Requirements

Must-haves

----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Location: Remote
Department: Information Technology
Compensation: $130,000–$153,000 annually
Position Type: Full-Time
Travel: Up to 10%, as needed
Lead the organization’s Security Operations function, including monitoring, detection, investigation, escalation, containment, and remediation
Oversee SIEM, EDR/XDR, email security, vulnerability management, threat intelligence, and related security technologies
Develop and maintain security alerts, detection rules, dashboards, use cases, and escalation procedures
Lead cybersecurity incident response activities, including investigation, containment, recovery, and post-incident review
Maintain and test cybersecurity incident response plans and supporting playbooks
Lead the vulnerability management lifecycle across servers, endpoints, applications, cloud environments, and network infrastructure
Establish risk-based vulnerability prioritization and remediation standards
Monitor emerging cybersecurity threats and coordinate proactive threat-hunting activities
Identify risks related to ransomware, phishing, business email compromise, credential theft, insider threats, and healthcare data theft
Strengthen identity and access security, including privileged access, MFA, conditional access, and account monitoring
Support security monitoring and response across cloud platforms and SaaS environments
Support compliance with HIPAA, HITRUST, SOC 2, PCI DSS, client security requirements, and other applicable frameworks
Partner with Privacy, Compliance, Legal, and Risk teams on investigations involving sensitive or regulated information
Lead, mentor, and develop Security Operations personnel
Establish on-call procedures, incident escalation paths, and after-hours response processes
Manage security technology vendors, managed security service providers, and incident response partners
Develop operational dashboards and reports for Information Security and executive leadership
Track key security and risk indicators, including incident response times, vulnerability remediation, endpoint coverage, phishing trends, and security control effectiveness

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: ukg
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Pto

Paid Time Off