What are the responsibilities and job description for the IT Security Manager position at Onco360?
Are you searching for an IT Position with a growing company that makes a difference? We are looking for YOU to be our IT Security Manager!
Onco360 Pharmacy is a unique oncology pharmacy model, created to serve the needs of community, oncology and hematology physicians, patients, payers, and manufacturers. Our
Onco360 Pharmacy in Louisville, KY has an immediate need for an IT Security Manager.
A career with us is more than just a job. It's an opportunity to connect and care for our patients, providers, communities and each other. We attract extraordinary people who have a strong desire to live our mission - to better the lives of those battling cancer and rare diseases. Compassion is more important than numbers. We value teamwork, respect, integrity, and passion.
We succeed when you do, and our company and management team work hard to foster an environment that provides you with opportunities for both professional and personal growth.
Benefits
- Medical; Dental; Vision
- 401k with a match
- Paid Time Off and Paid Holidays
- Tuition Reimbursement
- Company paid benefits - life insurance, short and long-term disability
Summary
We are seeking an experienced and dynamic Information Security Manager to join our Information Security Team at ONCO360. As an integral part of our team, you will lead efforts to safeguard critical information assets and maintain the confidentiality, integrity, and availability of our systems and data. The ideal candidate will have a strong background in information security risk management, and compliance, along with exceptional leadership and communication skills. You will play a pivotal role in shaping our security strategy, ensuring compliance with relevant regulations, and fostering a culture of security awareness throughout the organization.
IT Security Manager Major Responsibilities:
- You will play a pivotal role in shaping our security strategy, ensuring compliance with relevant regulations, and fostering a culture of security awareness throughout the organization.
- Develop and implement an information security strategy aligned with business objectives.
- Identify emerging security threats and vulnerabilities, and proactively adjust security strategies accordingly.
- Collaborate with cross-functional teams to integrate security practices into system development lifecycle and business processes.
- Supplement the day-to-day operation of security controls, including email security, identity and access management, and endpoint protection.
- Monitor security events and incidents, responding promptly to mitigate potential threats.
- Lead incident response efforts, including investigation, containment, and recovery.
- Ensure the organization's compliance with relevant industry regulations (e.g., CIS, SOC2, HIPAA) and internal policies.
- Develop and enforce security requirements for vendors and third parties accessing the organization's systems or data.
- Develop and implement an information security strategy aligned with business objectives.
- Identify emerging security threats and vulnerabilities, and proactively adjust security strategies accordingly.
- Collaborate with cross-functional teams to integrate security practices into system development lifecycle and business processes.
- Supplement the day-to-day operation of security controls, including email security, identity and access management, and endpoint protection.
- Monitor security events and incidents, responding promptly to mitigate potential threats.
- Lead incident response efforts, including investigation, containment, and recovery.
- Ensure the organization's compliance with relevant industry regulations (e.g., CIS, SOC2, HIPAA) and internal policies.
- Develop and enforce security requirements for vendors and third parties accessing the organization's systems or data.
- Manage and mentor a team of security professionals, setting clear goals and expectations.
- Strong knowledge of security frameworks, standards, and best practices (e.g., NIST, ISO 27001).
- Excellent communication skills, both written and verbal, with the ability to present complex technical information to non-technical stakeholders.
- Strong leadership and team management skills, with a history of building and leading effective security teams.
IT Security Manager Qualifications:
Education/Learning Experience:
- Required: Bachelor’s degree in Cybersecurity or a related field, such as Information Systems or Computer or equivalent work experience.
- Desired: Technical certifications in the field of expertise
Work Experience:
- Required: 3 or more years of experience in information security management or a related field.
- Desired: 5 or years of experience in information security management or a related field.
Skills/Knowledge:
- Desired: Working closely to align business and technology (supply and demand).
- Experience with budgeting, expense management and contract management.
Licenses/Certifications:
- Required: CISSP or CISM preferred
- Desired: Membership in ITIL, Cybersecurity, and other security Organization
Behavior Competencies:
- Required: Leadership, Communication, Teamwork, Customer Service, Dependability, Organization and planning,
- Problem solving, technological orientation.
- Service/process with integration focus.
Ability to travel up to 15%
Service Manager
Sonitrol Security -
Louisville, KY
IT Manager
Trace Die Cast, Inc. -
Bowling Green, KY
IT Manager
Intellipro Group Inc -
Jeffersonville, IN
