{"id":52400,"url":"https://alion.io/job/qualderm-partners-manager-information-security","title":"Manager, Information Security","company":{"id":9155,"name":"QualDerm Partners","domain":"qualderm.com","url":"https://alion.io/company/qualderm-partners","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"B","score":77,"open_postings":14,"ghost_share":0,"stale_share":0.929,"repost_share":0,"time_to_fill_p50_days":29,"computed_at":"2026-10-19T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Brentwood, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":87000,"max_usd":199000,"period":"year","method":"role_country_seniority_unknown","sample_n":3177},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"DLP","optional":false},{"name":"HIPAA","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-08-11T00:00:00Z","employer_posted_date":"2026-08-11","last_verified_at":"2026-10-19T16:38:47Z","board_verified":true,"closed_at":null,"days_open":69,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":69},"description":"Company Summary:\nTo achieve and maintain our high-quality standards, we see to partner with physicians and staff who share our vision, values and brand promises and are dedicated to advancing our culture. QualDerm providers and staff are well-trained, highly skilled and recognized as leaders in the specialty of dermatology.\nWe currently have 158 practices in 17 states, spanning across the full spectrum of dermatology, skin cancer care, cosmetics, plastic surgery, and pathology with continued plans to expand further across the nation.\nWe will partner with you to establish the best combination of environment, technology, teamwork and personal reward opportunities to earn your confidence that we are your best place to work.\nPurpose:\nOur organization operates a network of healthcare facilities and is investing in building out a mature, right-sized information security program to protect patient data, clinical operations, and business systems across all sites. We are seeking a Manager, Information Security to own the company's overall security posture end-to-end.\nThis is a hands-on, builder-oriented role, not a purely governance or policy-writing position. The ideal candidate has personally implemented security programs and controls, as a security architect, security engineer, or similar, and is comfortable being both the strategist setting direction and the practitioner in the tools day to day. You will partner closely with the Director, IT Infrastructure & Cloud, Director - Applications, and Data Analytics teams to ensure security is embedded into infrastructure, cloud (Azure), network, and endpoint architecture, while independently owning the company's overall security strategy, governance, and risk posture.\nEssential Duties and Responsibilities:\nSecurity Strategy & Program Ownership\nOwn and evolve the company's overall information security strategy, roadmap, and maturity model, appropriately scoped for the size of the company.\nAct as the organization's senior-most day-to-day security leader, briefing leadership on risk posture, incidents, and program progress.\nDefine, track, and report on security KPIs/metrics (risk reduction, vulnerability remediation SLAs, incident response times, control coverage).\nBuild and manage the information security tooling, staffing, and third-party assessments.\nHands-On Security Architecture & Engineering\nPersonally design and implement security architecture across identity, network, endpoint, cloud (Azure), and application layers; this is a working leader role, not purely oversight.\nOwn the technical implementation and tuning of core security tooling: SIEM/SOAR, EDR/XDR, vulnerability management, email security, DLP, CASB, and identity/access management (Azure AD/Entra ID, PAM, MFA/conditional access).\nDesign and enforce network and cloud security architecture in partnership with the Director, IT Infrastructure & Cloud (segmentation, firewall/NGFW policy, cloud security posture management).\nLead vulnerability management and penetration testing programs, driving remediation across infrastructure, application, and data teams.\nGovernance, Risk & Compliance\nOwn the organization's compliance posture for HIPAA, and applicable state/federal security regulations.\nConduct and maintain enterprise risk assessments, third-party/vendor security risk reviews, and business associate agreement (BAA) security requirements.\nDevelop, maintain, and test incident response, disaster recovery, and business continuity plans; lead tabletop exercises.\nServe as key point of contact for security audits, regulatory inquiries, and cyber insurance underwriting/renewals.\nIncident Response & Threat Management\nLead detection, response, and remediation for security incidents, coordinating with IT Infrastructure, clinical operations, legal, and external forensics/counsel as needed.\nOwn threat intelligence monitoring and proactive threat hunting to identify risk before it becomes an incident.\nMaintain and continuously improve the security monitoring and alerting environment (SIEM use cases, detection engineering).\nSecurity Awareness & Culture\nDesign and lead the company-wide security awareness and phishing simulation program partnering with training team, across all sites.\nPartner with HR, Compliance, and clinical leadership to embed security practices into onboarding, training, and day-to-day workflows.\nBuild positive, collaborative relationships with IT, clinical, and business stakeholders to drive security adoption without becoming a bottleneck to operations.\nCross-Functional Partnership\nPartner closely with the Director, IT Infrastructure & Cloud on all infrastructure, network, and cloud initiatives (Azure migrations, de-novo site launches, M&A integrations) to ensure security is designed in from the start, not bolted on afterward.\nParticipate in technical due diligence and security risk assessment for M&A activity and de-novo site launches, in coordination with the infrastructure team.\nAdvise application, data, and clinical systems teams on secure design practices (secure SDLC, API security, EHR/clinical system integrations).\nPerform other duties as assigned\nAdheres to Code of Conduct and Mission & Value Statement.\nParticipates in special projects as needed.\nRequirements\nBachelor's degree in Information Security, Computer Science, or related field (or equivalent experience).\n8+ years of progressive information security experience, including prior hands-on roles such as Security Architect, Security Engineer, or Senior Security Analyst, with demonstrated ownership of security program implementation (not just policy or audit work).\n2+ years in a security leadership role, owning strategy and program direction for an organization or business unit.\nDeep, hands-on experience with core security domains: identity and access management, network security, endpoint/EDR, cloud security (Azure preferred), vulnerability management, and SIEM/detection engineering.\nDemonstrated experience building or maturing a security program largely from the ground up or through a significant maturity uplift.\nWorking knowledge of healthcare regulatory and compliance frameworks (HIPAA, HITECH); HITRUST or SOC 2 program experience a plus.\nExperience leading incident response for real-world security incidents, including coordination with legal, executive leadership, and external parties.\nStrong communication skills, with the ability to translate technical risk into business terms for non-technical executives and board members.\nPreferred:\nRelevant certifications such as CISSP, CISM, CCSP, or Microsoft Certified: Azure Security Engineer Associate.\nExperience in multisite healthcare delivery organizations (hospital systems, ambulatory networks, home health, behavioral health, or similar).\nExperience supporting security due diligence and integration for mergers, acquisitions, or de-novo site launches.\nFamiliarity with EHR/clinical systems and their unique security and compliance requirements.\nPrior experience operating as the most senior security leader in an organization.\nBenefits\nBenefits of joining Qualderm Partners:\n Competitive Pay - Attractive compensation to reward your hard work\n Comprehensive Health Coverage - Includes Medical, Dental, and Vision plans to keep you covered\n Generous 401(k) Plan - Company matches 100% of the first 3%, plus 50% of the next 2%, with immediate vesting\n Paid Time Off (PTO) - Accrue PTO from day one, plus enjoy 6 paid holidays and 2 floating holidays each year\n Company-Paid Life Insurance - Peace of mind with basic life coverage, with the option for additional plans\n Disability Protection - Short-term and long-term disability coverage to protect you in unexpected circumstances\n Additional Wellness Plans - Accident, critical illness, and identity theft protection plans for extra security\n Employee Assistance Program (EAP) - Access confidential support for personal or work-related challenges\n Exclusive Employee Discounts - Save on products and services with special discounts just for you\n Referral Bonus Program - Earn bonuses by referring qualified candidates to join the team\nQualDerm Partners is proud to be an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Applicants must be currently authorized to work in the United States in a full-time basis.","description_format":"text","description_chars":8375,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Dermatology"],"lifecycle":[{"event":"open","at":"2026-08-06T00:00:00Z"}],"visa":[],"liveness":{"score":5,"band":"cold","label":"Long shot","p_open":1,"p_active":0.184,"p_room":0.28,"age_days":69,"expected_fill_days":29,"reasons":["conf:1","stale_co","win:tail","crowd:"],"computed_at":"2026-10-19T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/qualderm-partners-manager-information-security","json_url":"https://alion.io/job/qualderm-partners-manager-information-security.json","meta":{"generated_at":"2026-10-19T17:47:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13569,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-20T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":9155},"rest":"https://alion.io/mcp/rest/get_company?id=9155"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fqualderm-partners-manager-information-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fqualderm-partners-manager-information-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fqualderm-partners-manager-information-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/qualderm-partners-manager-information-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fqualderm-partners-manager-information-security"}]}