Operational Security Manager

Description Job Summary The Operational Security Manager provides operational and technical leadership for the delivery of cybersecurity services and security program execution across client organizations, with an emphasis on healthcare and other highly regulated environments. This position is accountable for security service delivery, security resource management, operational risk reduction, vulnerability management governance, incident readiness, policy governance, security operational effectiveness, and the coordination of cybersecurity activities across internal resources, client stakeholders, managed service providers, and third-party partners. The Operational Security Manager serves as the primary technical leader responsible for assigning security resources, establishing security priorities, coordinating security workstreams, and ensuring that cybersecurity initiatives align with organizational risk-management objectives. This role supervises security analysts and engineers and acts as the primary operational security liaison between client leadership, technical teams, governance stakeholders, and security service providers. The Operational Security Manager is accountable for security operations oversight, security resource management, vulnerability management governance, incident response coordination, security service delivery, security program execution, security awareness programs, security risk coordination, policy and standards development, data protection governance support, technical stakeholder communications, and operational security reporting. The position is not accountable for project scheduling, milestone management, portfolio governance, or project-trackability reporting, which remain the responsibility of assigned Project Managers. The Operational Security Manager partners closely with Project Management personnel, who maintain project schedules, milestones, dependencies, and portfolio reporting. While Project Managers own workstream trackability, the Operational Security Manager owns security resource assignments, technical execution oversight, service quality, and operational outcomes. Primary internal partnerships include Project Managers, Security Architects, GRC Analysts, Privacy and Compliance Teams, IT Infrastructure Leadership, Clinical Technology Teams, and Managed Security Service Providers. Essential Job Functions Lead daily cybersecurity operations across assigned client environments, including monitoring, alert triage, incident response coordination, and operational remediation activities. Supervise security analysts, engineers, and specialized security resources; establish priorities and assign resources across security workstreams. Manage cybersecurity resource allocation across operational, strategic, and project-related activities, including workload balancing and resource-conflict resolution. Oversee the vulnerability and exposure management lifecycle, including scan review, risk prioritization, remediation coordination, exception management, executive reporting, recurring vulnerability review meetings, remediation validation, compensating-control validation, vulnerability trend monitoring, penetration testing coordination, and visibility into cloud, infrastructure, endpoint, application, IoT, and IoMT security exposures. Coordinate incident response activities, escalation processes, stakeholder communications, forensic investigations, third-party incident response services, post-incident reviews, corrective-action planning, incident response playbooks, escalation procedures, communication plans, lessons-learned updates, and tabletop exercises. Support governance, risk, and compliance activities, including assessments, audits, risk analysis, evidence collection, remediation planning, and policy, standard, procedure, and guideline development. Oversee managed security service delivery, service quality, operational effectiveness, service maturity, and accountability for assigned security tasks across internal and external resources. Coordinate data protection and privacy-related security activities, including DLP, DSPM, data classification, sensitive data protection, investigations, eDiscovery support, and remediation activities. Lead security awareness and training initiatives, evaluate program effectiveness, and develop recommendations to improve organizational security culture. Monitor third-party and vendor security risks, review material vendor-security findings, provide technical input to vendor risk assessments, and elevate issues that may affect operations or regulatory obligations. Provide operational security reporting to leadership and client stakeholders, including updates on security operations, vulnerability management, incident trends, control effectiveness, security-program maturity, and remediation activities. Provide technical status, resource constraints, and security-risk updates to Project Management for portfolio-level reporti