Information Security Manager [Remote]

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Information Security Manager based in the United States.

This role offers the opportunity to strengthen enterprise security operations within a fully remote, technology-driven environment.
The Information Security Manager will play a critical role in protecting sensitive healthcare data, maintaining compliance standards, and improving security maturity across the organization.
Working across identity management, security monitoring, application security, and governance, this position helps ensure resilient and trusted systems.
The role combines hands-on technical expertise with strategic oversight, supporting regulatory readiness and continuous security improvement.
The ideal candidate will be a proactive security professional who can manage complex security initiatives while collaborating with technical and business stakeholders.
This position provides the opportunity to make a meaningful impact in a highly regulated healthcare environment focused on trust, privacy, and better outcomes.

Accountabilities:

The Information Security Manager is responsible for operating, enhancing, and maintaining enterprise security programs that protect sensitive information and support compliance with industry regulations. This role manages security operations, identity governance, audit readiness, data protection initiatives, and vendor security processes while serving as a key partner across technology and business teams.

• Administer and enhance identity and access management processes, including Microsoft Entra ID, Active Directory, user lifecycle management, conditional access, MFA, SSO integrations, and role-based access controls.
• Conduct regular access reviews, account audits, and remediation activities to maintain least-privilege access and strengthen security controls.
• Operate and optimize security monitoring capabilities, including SIEM platforms, security alerts, endpoint visibility, and threat detection processes.
• Investigate and respond to security incidents by supporting identification, containment, recovery, documentation, and continuous improvement efforts.
• Maintain and improve security controls aligned with defense-in-depth strategies and organizational risk objectives.
• Support compliance programs including SOC 2, URAC, HIPAA, and HITRUST CSF initiatives through evidence collection, control mapping, audit preparation, and remediation tracking.
• Lead security certification readiness activities, including gap assessments, control implementation, and coordination with internal and external stakeholders.
• Provide security oversight for applications, integrations, data flows, and system configurations to ensure secure design and operation.
• Manage data governance activities, including Microsoft Purview administration, data classification, loss prevention controls, retention policies, eDiscovery, and legal hold support.
• Evaluate and manage security tools, vendors, and third-party risk processes, including product assessments, renewals, configuration oversight, and security reviews.
• Develop and maintain security documentation, including policies, procedures, standards, technical baselines, and operational runbooks.
• Respond to security-related requests and support teams with timely, well-documented solutions.
• Communicate security risks, recommendations, and technical concepts effectively to both technical and non-technical audiences.

Requirements:

The ideal candidate will bring strong information security experience, technical knowledge of Microsoft security technologies, and familiarity with compliance requirements in regulated industries. This role requires a detail-oriented professional who can independently manage security initiatives, prioritize competing demands, and collaborate effectively across remote teams.

• Bachelor’s degree in Computer Science, Information Security, Information Technology, or a related discipline, or equivalent professional experience.
• 4–7 years of experience in information security, cybersecurity operations, or security engineering.
• Hands-on experience with Microsoft security technologies, including Entra ID, Active Directory, Microsoft 365, and Azure.
• Experience supporting compliance frameworks such as SOC 2, HITRUST, URAC, and HIPAA.
• Proven experience with identity and access management, SSO, SIEM operations, and data governance solutions.
• Experience conducting vendor security assessments and managing third-party security risks.
• Knowledge of healthcare, pharmacy benefits management, or other highly regulated environments preferred.
• Familiarity with security certifications such as CISSP, CISM, CompTIA Security+, SC-200, SC-300, AZ-500, or HITRUST CCSFP preferred.
• Strong technical understanding with the ability to translate security concepts for diverse audiences.
• Excellent written and verbal communication skills.
• Strong problem-solving mindset with the ability to work independently and manage multiple priorities.
• Ability to maintain a reliable remote work environment with strong availability and communication practices.
• Willingness to support occasional after-hours activities related to security incidents or audit deadlines.
• Ability and willingness to travel approximately 10–20%.

Benefits:

• Competitive compensation package.
• Health, dental, vision, and additional employee benefits.
• Fully remote work environment.
• Opportunity to contribute to meaningful improvements in healthcare technology and data security.
• Chance to work in a collaborative culture focused on innovation, trust, and professional growth.
• Opportunity to influence security strategy and strengthen enterprise security capabilities.
• Supportive environment where employees are encouraged to grow and make an impact.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.