Cyber Security Manager

OverviewFounded in 2007 as America's first dental partnership organization, MB2 Dental has grown to 850+ partner practice locations nationwide. At that scale, protecting patient data is not a back-office concern. It is a core operational and legal responsibility that touches every part of the organization.We are looking for a Cybersecurity Manager who is ready to own this function. The right person brings technical depth, leadership capability, and the drive to build a security program in a complex, fast-moving healthcare environment. This role requires someone who can operate strategically and execute hands-on without hesitation.This is not a policy-writing role. MB2 Dental's IT leaders are builders and doers, and we expect the same here. You will own the security function, lead and develop the security team, and personally execute: building controls, responding to incidents, administering platforms, and driving the program forward.We are pleased to offer a competitive compensation package that includes medical/dental/vision/life insurance, long- and short-term disability, PTO, paid holidays, traditional and Roth 401(k) options, and more.How We Work: Hands-On by DesignAt MB2 Dental, our IT leaders do not just direct the work. They are in it. That is a deliberate part of our culture and something we take pride in. This role is built the same way.In practice, that means the Cybersecurity Manager is working alongside the team: administering security platforms, personally investigating and responding to incidents, building and configuring controls, and maturing the SIEM program. Third-party risk reviews, vendor access assessments, and daily team direction all live here, too.This is also a leadership role with real influence. The team looks to this person for guidance, mentorship, and escalation support. We want someone who brings out the best in the people around them while staying deeply connected to the technical work. That balance is what makes this role meaningful.If that sounds like the kind of environment where you do your best work, we would like to meet you.What You'll Own:Security Team LeadershipLead, mentor, and develop MB2 Dental's cybersecurity team alongside your own hands-on technical workSet daily direction, handle escalations, and hold the team accountable to standards and timelinesServe as the primary security voice to IT and compliance leadership, translating technical risk into clear business termsOwn the security program roadmap and drive prioritized executionBuild reporting that gives leadership accurate, actionable visibility into security postureEndpoint Security and EDR AdministrationAdminister our endpoint detection and response (EDR) platform across the organizationLead incident response end-to-end: detection, investigation, containment, remediation, and post-incident reviewTune detection policies, improve alert quality, and develop and maintain response playbooksDrive continuous improvement of managed endpoint coverage and detection capability across the organizationMicrosoft 365 Security and HardeningOwn security configuration and hardening across the Microsoft 365 environmentImplement and mature data loss prevention (DLP) policies covering PHI, PII, and sensitive financial dataBuild and enforce a data classification and sensitivity label taxonomy aligned to HIPAA requirementsHarden email security: DMARC, DKIM, SPF, anti-phishing, safe links, and safe attachmentsManage identity security controls, Conditional Access policies, and tenant-wide governanceAI Security GovernanceEstablish, refine, and enforce controls governing MB2 Dental's use of AI tools across the organizationManage approved AI tool configurations, data access scope, and acceptable use policy enforcementIdentify and remediate shadow AI risk: unauthorized tools, unsanctioned integrations, and PHI/PII exposureEvaluate new AI tools and third-party connectors for security and HIPAA compliance before deploymentKeep AI governance current as the regulatory and technology landscape continues to evolveSIEM and Security OperationsOwn hands-on administration and continued maturation of MB2 Dental’s SIEM platformDefine and build log ingestion, detection rules, alerting, and correlation logicCreate dashboards and reporting that give leadership real visibility into security eventsContinuously refine detection logic and response playbooks as the platform maturesThird-Party and Vendor Security OversightDefine, enforce, and audit security standards for third-party technology partners and vendorsReview and govern external access to MB2 Dental systems and data, including BAA complianceBuild and maintain a vendor security review process for onboarding new technology providersIdentify and drive remediation of vendor-introduced risk across the organizationNetwork Security and HIPAA ComplianceAssess network security posture across the organization and prioritize hardening opportunitiesGuide firewall configuration, segmentation standards, and access control policySupport DNS filtering, threat intelligence integration, and network visibility initiativesOwn HIPAA security compliance: risk assessments, audit preparation, BAA management, and control evidenceWhat You Bring:Required4+ years of cybersecurity experience with a strong hands-on technical foundation. You have not left the work behind.Experience leading or mentoring a security team or function, formally or informallyDirect EDR/XDR platform ownership: real policy management, real alert triage, real incident responseStrong working knowledge of Microsoft 365 security and compliance toolingExperience building and managing DLP policies and data classification frameworksStrong understanding of email security: DMARC, DKIM, SPF, and Exchange Online hardeningExperience managing security in a complex, multi-site, or distributed environmentWorking knowledge of HIPAA requirements, BAA obligations, and PHI/PII risk managementComfortable doing the work and directing others at the same time - This is not an either/or rolePreferredHands-on SIEM experience: implementation or operational ownership of Sentinel, Splunk, or similarBackground in AI security governance: shadow AI detection, approved tool management, DLP for AI toolsExperience building vendor and third-party security oversight programsHands-on experience with Microsoft 365 compliance and data governance toolingSecurity certifications: CISSP, CISM, SC-200, AZ-500, CompTIA Security+, or equivalentDental, healthcare, or other HIPAA-regulated industry experienceThe Opportunity:This role has real scope and real authority. You will own MB2 Dental's security function across a large, complex healthcare organization with significant responsibility for PHI and PII. You will have direct access to IT and compliance leadership, executive support, and the latitude to shape the program as it grows.MB2 Dental's IT culture is collaborative and fast-moving, with less bureaucracy and more opportunity to do meaningful work. We invest in our people through continuous learning and access to training resources. If you want to build something you are proud of inside an organization that is growing and investing in the right things, this is that opportunity.What the First 90 Days Look Like:Days 1–30: Learn the LandscapeGet fully oriented on the environment, team, tooling, and current security postureAssume hands-on ownership of EDR administration and incident responseComplete an M365 security review and SIEM maturity assessment to establish your baselineDays 31–60: Sharpen the ProgramDeliver a prioritized M365 hardening roadmap based on your assessment findingsReview the existing sensitivity label framework and recommend enhancementsConduct a third-party vendor access review and validate current controlsDays 61–90: Accelerate and AlignAdvance Purview DLP policies toward broader enforcement across the highest-risk PHI and PII data typesDeliver a 6-month security roadmap that builds on existing investments with sequenced priorities and recommendationsWho You'll Work With:You will report directly to the VP of Information Technology and work closely with the Chief Compliance and Information Officer on HIPAA compliance, BAA obligations, and data governance. You will lead the cybersecurity team day to day and collaborate with IT Infrastructure, IT Service Desk, and field IT staff across the MB2 Dental network.MB2 Dental is an equal opportunity employer.INDHRM200Job Summary