Senior Manager, Cyber Security
Clinisys · Morrisville, United States · remote
Building an AI-first organization is central to Clinisys’ purpose and the impact we deliver. As a global provider of intelligent diagnostic informatics solutions, we build AI-enabled, cloud-based platforms to enhance diagnostic workflows across healthcare, life sciences, and public health. By applying intelligent technology thoughtfully and responsibly, we help laboratories and testing environments operate more effectively, generate meaningful insights at scale, and ultimately support healthier and safer communities. Operating across more than 30 countries, Clinisys expects all colleagues, regardless of role or function, to work confidently with AI-enabled tools, apply digital and analytical thinking, and continuously adapt as technologies evolve.
Role Description:
The Senior Manager of Cyber Security is a senior operational leader within the global Information Technology organization. Based in Raleigh, North Carolina US office, this role leads the day-to-day delivery and continuous improvement of Clinisys’ cyber security program across corporate technology, cloud and SaaS environments, products, and customer-facing services. The role translates cyber strategy, risk priorities, regulatory obligations, and customer commitments into clear plans, accountable execution, and measurable outcomes.
Working closely with the VP of IT / CIO | CISO, the Senior Manager will lead and develop cyber security professionals, coordinate activity across technology and business teams, and act as a trusted escalation point for cyber risk, incidents, control weaknesses, and remediation. The role combines people leadership, program ownership, and hands-on management oversight. Enterprise cyber strategy, final risk acceptance, and executive accountability remains with the CIO | CISO.
Responsibilities:
Cyber Security Operations and Incident Management
• Lead the effective operation of security monitoring, alert triage, detection, investigation, response, and escalation processes across corporate, cloud, product, and customer service environments.
• Maintain and exercise cyber incident response plans and playbooks, coordinating technical teams and partners during significant incidents and ensuring timely containment, evidence preservation, root cause analysis, communications support, and corrective actions.
• Oversee internal and outsourced security services, including service performance, monitoring coverage, alert quality, escalation paths, case management, and follow-through on identified improvements.
• Provide clear operational reporting on incidents, vulnerabilities, control health, remediation progress, recurring themes, and emerging threats; escalate material risks or delays promptly.
• Participate in an appropriate leadership escalation rotation and support time-sensitive cyber incidents outside standard working hours when required.
Governance, Risk and Compliance
• Operationalize the cyber security strategy, roadmap, policies, standards, and control framework established by the CIO | CISO, translating objectives into prioritized delivery plans and accountable workstreams.
• Manage cyber risk and control-assurance activities, ensuring risks are clearly documented, assessed, assigned to accountable owners, supported by treatment plans, and escalated where exposure exceeds agreed tolerance.
• Coordinate evidence, remediation, and continuous-compliance activities supporting ISO 27001, SOC 2, Cyber Essentials Plus, GDPR, NHS requirements, customer obligations, Roper Technologies control criteria, and other applicable standards or attestations.
• Partner with Legal, Privacy, Compliance, Internal Audit, and business stakeholders to ensure security requirements are understood, implemented, evidenced, and maintained.
• Lead or support internal and external audits, control assessments, customer reviews, penetration-test follow-up, and regulatory or contractual assurance activities.
Vulnerability, Cloud and Technology Security
• Oversee vulnerability management across infrastructure, endpoints, cloud services, applications, and products, including scanning coverage, risk-based prioritization, remediation tracking, exception management, and reporting.
• Coordinate independent penetration testing and security assessments; ensure findings are translated into practical remediation plans with clear owners, target dates, and escalation for overdue high-risk items.
• Partner with IT Operations, Cloud Operations, Enterprise Architecture, Product, and Engineering teams to embed proportionate security review into architecture, change, deployment, and operational processes.
• Promote effective controls for identity and access management, privileged access, multi-factor authentication, endpoint protection, logging, encryption, configuration management, backup protection, and secure cloud operation.
• Support secure-by-design and privacy-by-design practices across SaaS, software development, APIs, integrations, and DevOps delivery, including pragmatic use of automated security testing and release risk criteria.
Third-Party Risk and Customer Assurance
• Manage cyber security due diligence and ongoing assurance for critical suppliers, cloud providers, technology partners, and other third parties that access Clinisys systems, products, or sensitive information.
• Ensure identified supplier risks, exceptions, contractual commitments, and remediation actions are documented, assigned, monitored, and escalated appropriately.
• Support strategic customer assurance, security questionnaires, audits, due diligence, and sales engagements with accurate, consistent, and reusable evidence.
• Work with Sales, Legal, Product, and Compliance to ensure customer security commitments are achievable, approved, and reflected in operational controls.
Leadership, Delivery and Continuous Improvement
• Lead, coach, and develop a globally distributed cyber security team, establishing clear priorities, objectives, decision rights, service ownership, performance expectations, and development plans.
• Manage delivery across the cyber security portfolio, balancing operational demands, risk reduction, audit commitments, projects, and team capacity; surface dependencies and trade-offs early.
• Support workforce planning, supplier management, budget forecasting, tooling lifecycle decisions, and business cases for cyber security investment.
• Establish a disciplined operating rhythm for incidents, risks, vulnerabilities, audits, projects, metrics, and team development, with concise updates for the CIO | CISO and governance forums.
• Drive continuous improvement through process standardization, automation, data quality, control rationalization, and responsible use of AI-enabled security capabilities.
• Champion a practical security culture by providing trusted guidance, strengthening role-based awareness, and helping teams make informed risk decisions without creating unnecessary friction.
Local Functions:
• This role is based in the Clinisys Raleigh, North Carolina office and will operate on a hybrid basis in line with company policy and business needs.
• Regular collaboration across global time zones is required, with occasional travel to other Clinisys offices, customer locations, suppliers, or company events.
• The role requires flexibility to support significant cyber incidents and urgent business needs outside normal working hours.
Knowledge, Skills & Abilities:
Skills Needed to Be Successful
• Broad practical knowledge across security operations, incident response, governance, risk and compliance, vulnerability management, cloud security, identity, application security, third-party risk, and customer assurance.
• Demonstrated ability to lead engineers, analysts, and compliance professionals, including setting direction, managing performance, developing capability, and creating accountability across locations.
• Ability to translate technical findings, regulatory obligations,