IT Security Manager – Healthcare

About the role

The IT Security Manager will lead the day‑to‑day security operations of a healthcare organization, covering cyber, physical and operational security. Reporting to the Security Director, the role ensures that security technologies are run effectively, incidents are detected and resolved, and that security controls support patient care without disruption.

Key responsibilities

• Execute the organization’s security strategy and policies across IT systems, clinical platforms, infrastructure and facilities.
• Monitor security events, alerts and risks continuously and maintain readiness for incidents affecting patient data or facilities.
• Manage and operate security technologies such as firewalls, IDS/IPS, endpoint protection, EDR, SIEM, email/web security, IAM and vulnerability management tools.
• Oversee physical security systems including CCTV, video surveillance and access‑control solutions for data centres and critical areas.
• Define, document and operationalise security scenarios (e.g., ransomware, phishing, unauthorized access) and lead incident detection, containment and recovery.
• Lead the security team’s daily activities, assign shifts, review alerts and coach team members.
• Collaborate with application, infrastructure and clinical teams to embed security controls into HIS, PACS, Oracle Fusion and other systems.
• Identify, report and track security risks, compliance issues and provide regular reporting to senior management.

Required profile

• Proven experience managing security operations in a healthcare environment.
• Demonstrated ability to lead a security team and coordinate incident response.
• Strong collaboration skills with IT, clinical and facilities teams.
• Understanding of regulatory and compliance requirements affecting health data.

Required skills

• Firewalls and network security appliances
• IDS/IPS systems
• Endpoint protection and EDR solutions
• SIEM and log monitoring platforms
• Email and web security solutions
• Identity and Access Management (IAM) including Active Directory controls
• Vulnerability assessment and patch management tools
• CCTV and video surveillance platforms
• Access‑control systems (card‑based, biometric, secure zones)
• Security systems protecting data centres and critical technical areas