{"id":3519415,"url":"https://alion.io/job/clinisys-senior-manager-cyber-security","title":"Senior Manager, Cyber Security","company":{"id":2461982,"name":"Clinisys","domain":"clinisys.com","url":"https://alion.io/company/clinisys-com","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"UltiPro","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Raleigh, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":135000,"max":180000,"currency":"USD","period":"year","gross":null,"usd_annual":180000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Configuration Management","optional":false},{"name":"GDPR","optional":false},{"name":"Incident Management","optional":false},{"name":"ISO 27001","optional":false},{"name":"SOC 2","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true}],"status":"live","first_seen_at":"2026-10-30T11:42:00Z","employer_posted_date":null,"last_verified_at":"2026-10-30T11:42:00Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"This a Full Remote job, the offer is available from: United States, North Carolina (USA)\nBuilding an AI-first organization is central to Clinisys’ purpose and the impact we deliver. As a global provider of intelligent diagnostic informatics solutions, we build AI-enabled, cloud-based platforms to enhance diagnostic workflows across healthcare, life sciences, and public health. By applying intelligent technology thoughtfully and responsibly, we help laboratories and testing environments operate more effectively, generate meaningful insights at scale, and ultimately support healthier and safer communities. Operating across more than 30 countries, Clinisys expects all colleagues, regardless of role or function, to work confidently with AI-enabled tools, apply digital and analytical thinking, and continuously adapt as technologies evolve.\nRole Description:\nThe Senior Manager of Cyber Security is a senior operational leader within the global Information Technology organization. Based in Raleigh, North Carolina US office, this role leads the day-to-day delivery and continuous improvement of Clinisys’ cyber security program across corporate technology, cloud and SaaS environments, products, and customer-facing services. The role translates cyber strategy, risk priorities, regulatory obligations, and customer commitments into clear plans, accountable execution, and measurable outcomes.\nWorking closely with the VP of IT / CIO | CISO, the Senior Manager will lead and develop cyber security professionals, coordinate activity across technology and business teams, and act as a trusted escalation point for cyber risk, incidents, control weaknesses, and remediation. The role combines people leadership, program ownership, and hands-on management oversight. Enterprise cyber strategy, final risk acceptance, and executive accountability remains with the CIO | CISO.\nResponsibilities:\nCyber Security Operations and Incident Management\nLead the effective operation of security monitoring, alert triage, detection, investigation, response, and escalation processes across corporate, cloud, product, and customer service environments.\nMaintain and exercise cyber incident response plans and playbooks, coordinating technical teams and partners during significant incidents and ensuring timely containment, evidence preservation, root cause analysis, communications support, and corrective actions.\nOversee internal and outsourced security services, including service performance, monitoring coverage, alert quality, escalation paths, case management, and follow-through on identified improvements.\nProvide clear operational reporting on incidents, vulnerabilities, control health, remediation progress, recurring themes, and emerging threats; escalate material risks or delays promptly.\nParticipate in an appropriate leadership escalation rotation and support time-sensitive cyber incidents outside standard working hours when required.\nGovernance, Risk and Compliance\nOperationalize the cyber security strategy, roadmap, policies, standards, and control framework established by the CIO | CISO, translating objectives into prioritized delivery plans and accountable workstreams.\nManage cyber risk and control-assurance activities, ensuring risks are clearly documented, assessed, assigned to accountable owners, supported by treatment plans, and escalated where exposure exceeds agreed tolerance.\nCoordinate evidence, remediation, and continuous-compliance activities supporting ISO 27001, SOC 2, Cyber Essentials Plus, GDPR, NHS requirements, customer obligations, Roper Technologies control criteria, and other applicable standards or attestations.\nPartner with Legal, Privacy, Compliance, Internal Audit, and business stakeholders to ensure security requirements are understood, implemented, evidenced, and maintained.\nLead or support internal and external audits, control assessments, customer reviews, penetration-test follow-up, and regulatory or contractual assurance activities.\nVulnerability, Cloud and Technology Security\nOversee vulnerability management across infrastructure, endpoints, cloud services, applications, and products, including scanning coverage, risk-based prioritization, remediation tracking, exception management, and reporting.\nCoordinate independent penetration testing and security assessments; ensure findings are translated into practical remediation plans with clear owners, target dates, and escalation for overdue high-risk items.\nPartner with IT Operations, Cloud Operations, Enterprise Architecture, Product, and Engineering teams to embed proportionate security review into architecture, change, deployment, and operational processes.\nPromote effective controls for identity and access management, privileged access, multi-factor authentication, endpoint protection, logging, encryption, configuration management, backup protection, and secure cloud operation.\nSupport secure-by-design and privacy-by-design practices across SaaS, software development, APIs, integrations, and DevOps delivery, including pragmatic use of automated security testing and release risk criteria.\nThird-Party Risk and Customer Assurance\nManage cyber security due diligence and ongoing assurance for critical suppliers, cloud providers, technology partners, and other third parties that access Clinisys systems, products, or sensitive information.\nEnsure identified supplier risks, exceptions, contractual commitments, and remediation actions are documented, assigned, monitored, and escalated appropriately.\nSupport strategic customer assurance, security questionnaires, audits, due diligence, and sales engagements with accurate, consistent, and reusable evidence.\nWork with Sales, Legal, Product, and Compliance to ensure customer security commitments are achievable, approved, and reflected in operational controls.\nLeadership, Delivery and Continuous Improvement\nLead, coach, and develop a globally distributed cyber security team, establishing clear priorities, objectives, decision rights, service ownership, performance expectations, and development plans.\nManage delivery across the cyber security portfolio, balancing operational demands, risk reduction, audit commitments, projects, and team capacity; surface dependencies and trade-offs early.\nSupport workforce planning, supplier management, budget forecasting, tooling lifecycle decisions, and business cases for cyber security investment.\nEstablish a disciplined operating rhythm for incidents, risks, vulnerabilities, audits, projects, metrics, and team development, with concise updates for the CIO | CISO and governance forums.\nDrive continuous improvement through process standardization, automation, data quality, control rationalization, and responsible use of AI-enabled security capabilities.\nChampion a practical security culture by providing trusted guidance, strengthening role-based awareness, and helping teams make informed risk decisions without creating unnecessary friction.\nLocal Functions:\nThis role is based in the Clinisys Raleigh, North Carolina office and will operate on a hybrid basis in line with company policy and business needs.\nRegular collaboration across global time zones is required, with occasional travel to other Clinisys offices, customer locations, suppliers, or company events.\nThe role requires flexibility to support significant cyber incidents and urgent business needs outside normal working hours.\nKnowledge, Skills & Abilities:\nSkills Needed to Be Successful\nBroad practical knowledge across security operations, incident response, governance, risk and compliance, vulnerability management, cloud security, identity, application security, third-party risk, and customer assurance.\nDemonstrated ability to lead engineers, analysts, and compliance professionals, including setting direction, managing performance, developing capability, and creating accountability across locations.\nAbility to translate technical findings, regulatory obligations, and security frameworks into prioritized actions, measurable plans, and concise business risk reporting.\nStrong judgment under pressure, with the ability to coordinate complex incidents, make timely recommendations, and escalate material risk appropriately.\nCredible stakeholder management and communication skills with executives, auditors, customers, parent-company stakeholders, suppliers, product leaders, and technical teams.\nCommercial and customer-trust mindset, balancing risk reduction, regulatory obligations, delivery speed, usability, and cost.\nOrganized and outcome-focused approach to portfolio delivery, metrics, remediation governance, supplier performance, and team operations.\nRequired Experience & Education:\nTypically 8 or more years of progressive experience in cyber security, information security, technology risk, or a related discipline, including substantial people-management and operational leadership responsibility.\nExperience leading multiple cyber security disciplines, a significant security program, or a security operations function within a global SaaS, software, healthcare technology, life sciences, or similarly regulated organization.\nPractical experience with ISO 27001, SOC 2, GDPR, NIST Cybersecurity Framework, Cyber Essentials Plus, secure software development, cloud security, and risk-based control improvement.\nDemonstrated experience managing significant security incidents, audits or certifications, penetration testing, vulnerability remediation, third-party security risk, and executive-level reporting.\nBachelor’s degree in Cyber Security, Computer Science, Information Systems, Engineering, or a related field, or equivalent relevant professional experience.\nOne or more recognized security certifications such as CISSP, CISM, CRISC, CISA, CCSP, or equivalent.\nPreferred Qualifications:\nExperience in healthcare software, diagnostic or laboratory systems, or environments handling sensitive health and laboratory information.\nExperience working within a multi-company operating model and responding to parent-company control requirements and maturity assessments.\nKnowledge of AWS, Microsoft Azure, modern SaaS architectures, DevSecOps practices, and contemporary security tooling.\nExperience supporting security integration, organizational change, or remediation of acquired and legacy technology environments.\nSuccess Measures:\nCyber security operations, incidents, vulnerabilities, and remediation activities are managed consistently, transparently, and within agreed risk-based expectations.\nImprovement in control maturity and timely closure of high-risk audit, risk, vulnerability, penetration-test, and assessment findings.\nRequired certifications, attestations, and customer trust commitments are supported by accurate, reusable, and audit-ready evidence.\nThe cyber security team demonstrates clear accountability, stronger capability, effective collaboration, and dependable delivery across regions.\nSecurity priorities and investment needs are supported by clear metrics, sound risk analysis, and concise recommendations.\nOnboarding:\nAs part of our onboarding process, new employees will be required to attend or travel to a designated Clinisys office on their first day of employment. Requirements will be confirmed based on work location and are intended to support identity verification, completion of employment documentation, equipment issuance, introductions, and orientation to Clinisys policies and procedures.\nBenefits\nOur benefits are designed to help you move forward in your career, and in areas of your life outside of work. From health and wellness benefits, 401 (k) Savings Plan, stock incentive programs, paid time off, parental leave, and tuition assistance, we've got you covered with our total rewards package. For part-timers, your coverage will vary as you may be eligible for some of these benefits depending on your individual circumstances.\nThe starting pay range for a candidate selected for this position is generally within t...","description_format":"text","description_chars":12777,"description_truncated":true,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Company events","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","EHR & Clinical Software","Scientific & Lab Software"],"lifecycle":[{"event":"open","at":"2026-10-30T11:42:00Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":36,"reasons":["seen:0","win:early"],"computed_at":"2026-10-31T05:58:55Z"},"pay":{"stated_usd_annual":180000,"is_top_pay":true},"html_url":"https://alion.io/job/clinisys-senior-manager-cyber-security","json_url":"https://alion.io/job/clinisys-senior-manager-cyber-security.json","meta":{"generated_at":"2026-10-31T07:30:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11128,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2461982},"rest":"https://alion.io/mcp/rest/get_company?id=2461982"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fclinisys-senior-manager-cyber-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fclinisys-senior-manager-cyber-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fclinisys-senior-manager-cyber-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/clinisys-senior-manager-cyber-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fclinisys-senior-manager-cyber-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3519415}},{"tool":"search_jobs","arguments":{"company":"clinisys.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3519415},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}