Security Operations Manager

Job Description

Job Description

GetixHealth is seeking an experienced Security Operations Manager to lead the day-to-day Cybersecurity Operations Program and protect the confidentiality, integrity, and availability of company and client information within a healthcare revenue cycle management environment.

This role will oversee security monitoring, incident detection and response, vulnerability management, threat intelligence, endpoint operations, and the continuous improvement of security controls. The Security Operations Manager will also play a critical role in protecting ePHI, PII, financial information, client data, and other sensitive information while partnering with IT, Infrastructure, GRC, Compliance, Privacy, Legal, and executive leadership.

Location: Remote

Department: Information Technology

Compensation: $130,000–$153,000 annually

Position Type: Full-Time

Travel: Up to 10%, as needed 

----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

• Lead the organization’s Security Operations function, including monitoring, detection, investigation, escalation, containment, and remediation
• Oversee SIEM, EDR/XDR, email security, vulnerability management, threat intelligence, and related security technologies
• Develop and maintain security alerts, detection rules, dashboards, use cases, and escalation procedures
• Lead cybersecurity incident response activities, including investigation, containment, recovery, and post-incident review
• Maintain and test cybersecurity incident response plans and supporting playbooks
• Lead the vulnerability management lifecycle across servers, endpoints, applications, cloud environments, and network infrastructure
• Establish risk-based vulnerability prioritization and remediation standards
• Monitor emerging cybersecurity threats and coordinate proactive threat-hunting activities
• Identify risks related to ransomware, phishing, business email compromise, credential theft, insider threats, and healthcare data theft
• Strengthen identity and access security, including privileged access, MFA, conditional access, and account monitoring
• Support security monitoring and response across cloud platforms and SaaS environments
• Support compliance with HIPAA, HITRUST, SOC 2, PCI DSS, client security requirements, and other applicable frameworks
• Partner with Privacy, Compliance, Legal, and Risk teams on investigations involving sensitive or regulated information
• Lead, mentor, and develop Security Operations personnel
• Establish on-call procedures, incident escalation paths, and after-hours response processes
• Manage security technology vendors, managed security service providers, and incident response partners
• Develop operational dashboards and reports for Information Security and executive leadership
• Track key security and risk indicators, including incident response times, vulnerability remediation, endpoint coverage, phishing trends, and security control effectiveness

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field, or equivalent education and relevant experience
• 8+ years of progressive cybersecurity or information security experience
• 3+ years of experience leading security operations, incident response, security engineering, or a comparable cybersecurity function
• Demonstrated experience managing cybersecurity incidents across multiple technical and business teams
• Strong working knowledge of:
  • SIEM and security monitoring
  • EDR/XDR technologies
  • Incident response
  • Vulnerability management
  • Identity and access security
  • Network security
  • Email security
  • AI security
  • Threat intelligence
  • Security logging and detection
• Experience operating security programs in environments handling sensitive or regulated information
• Knowledge of common attack techniques and frameworks such as MITRE ATT&CK
• Strong analytical, investigative, organizational, and problem-solving skills
• Ability to communicate complex cybersecurity issues clearly to both technical and non-technical stakeholders
• Strong organizational and strategic planning skills
• Ability to meet deadlines, manage multiple priorities, and solve complex issues

• Strong incident response expertise
• A highly curious and investigative mindset
• A passion for cybersecurity and staying current with emerging threats and technologies
• Strong leadership and team development skills
• Ability to balance technical depth with strategic thinking
• Comfortable working in a fast-paced, performance-driven environment
• Ability to collaborate across IT, Compliance, Legal, Privacy, Risk, and executive leadership

• Comprehensive Health Benefits: Medical, dental, and vision plan options
• Life & Disability Coverage: Company-paid Basic Life and AD&D, short-term disability, and long-term disability coverage
• 401(k) Retirement Plan: Retirement savings plan with company match
• Paid Time Off: PTO accrual beginning on your first day of employment
• Flexible Benefit Options: Benefit choices designed to support individual and family needs

Founded in 1992, GetixHealth is a leading provider of healthcare revenue cycle management services. We partner with healthcare organizations to improve financial performance, operational efficiency, compliance, and the patient financial experience.

This role profile is not intended to be an exhaustive list of qualifications, skills, duties, responsibilities, or working conditions associated with the position.

GetixHealth is an equal employment opportunity employer and participates in E-Verify.