IT Security Manager

OVERVIEW

Nutex Health is seeking an experienced IT Security Manager to join our growing team. This job will have broad responsibilities for security related activities such as identity access management (IAM) using Okta, MFA, SSO, EDR, XDR, email security, Microsoft AD and Entra, web access firewall (WAF), and others. You will be managing and implementing information technology security solutions in addition to daily security operations. The ideal candidate will be a hands-on manager responsible for maintaining and enhancing the security posture of our enterprise, ensuring proper access controls, role-based security, network security, and supporting audit and compliance requirements with the IT Sox Manager, and the internal audit team.

RESPONSIBILITIES

Security Management

• Administer and monitor user access across applications and systems. How they relate to financial systems access will be a focus for SOX compliance. (e.g., Workday, Gorev, Waystar, and other financial applications).
• Experience with SIEM, WAF, EDR, XDR, SSO, MFA, and other security technologies.
• Lead the Okta implementation.
• Administer and monitor other cyber security tools.

SOX Compliance & Audit Support

• Ensure compliance with Sarbanes-Oxley (SOX) requirements related to application security and access controls.
• Coordinate with internal and external auditors to support testing and remediation efforts.

Security Monitoring & Risk Mitigation

• Monitor security solutions for unusual access patterns or policy violations.
• Perform periodic assessments of applications to identify and mitigate risks.
• Work with application owners and vendors to address vulnerabilities and implement best practices.
• Create remediation plans and follow through with implementation of those plans.

Policy & Procedure Development

• Develop, maintain, and enforce application security policies, procedures, and standards.
• Ensure policies align with corporate governance and compliance frameworks.

QUALIFICATIONS

• Bachelor’s degree in information technology, Cybersecurity, related fields of study, or an additional 4 years of experience.
• 10 or more years of experience in application security, cyber security, access management, and network security. Relevant experience will be considered.
• Hands-on experience with IAM management tools is a plus.
• Understanding of SOX controls, segregation of duties (SoD), and financial application security would be a plus.
• Healthcare experience in a hospital system with HIPAA experience is a plus.
• Strong analytical and critical thinking skills with attention to detail.
• Excellent verbal and written communication skills.

Benefits:

• 401(k) matching
• Dental insurance
• Employee discount
• Flexible spending account
• Health insurance
• Life insurance
• Paid time off
• Vision insurance

Application Question(s):

• This is a fully onsite (M - F) position. Are you able to commit to working on site?

Experience:

• Network security: 10 years (Required)
• OKTA or IAM: 10 years (Required)

License/Certification:

• CISSP (Preferred)
• CRISC (Preferred)
• CISM (Preferred)

Work Location: In person