Cybersecurity Engineering Manager (JR229586)

<strong>To heal, to teach, to discover and to advance the health of the communities we serve.<br /></strong><br /> <p>To learn more about the &ldquo;Montefiore Difference&rdquo; &ndash; who we are at Montefiore and all that we have to offer our associates, please click <strong><a href="https://healthymebenefits.com/" target="_blank" title="Montefiore Difference" rel="noopener noreferrer">here</a></strong>.&nbsp;</p>

Elmsford, New York

Montefiore

<h4 class=""><strong>WHY TOP TALENT PICKS MONTEFIORE EINSTEIN&nbsp;<br /><br /></strong>Since its inception in 1884, Montefiore Einstein&rsquo;s mission has been to heal, to teach, to discover and advance the health of the communities we serve.<br /><br />Montefiore Einstein&rsquo;s state-of-the-art facilities include the&nbsp;<span class="">internationally-recognized</span>&nbsp;Children&rsquo;s Hospital at Montefiore Einstein and our Notable Centers of Excellence - Montefiore Einstein Center for Cancer Care, Montefiore Einstein Center for Heart and Vascular Care, Montefiore Einstein Center for Transplantation. Combined with a growing number of locations throughout the Bronx and Westchester County, Montefiore Einstein is the ideal organization to apply and hone your expertise.<br /><br /><span style="text-decoration: underline;"><a href="https://montefiore.wd12.myworkdayjobs.com/en-US/MMC/login" target="_blank" title="Candidate Home" rel="noopener noreferrer">Sign In</a></span>&nbsp;- Candidate Home<br /><span style="text-decoration: underline;"><a href="https://montefiore.wd12.myworkdayjobs.com/en-US/MMC/introduceYourself" target="_blank" title="Introduce Yourself " rel="noopener noreferrer">Introduce Yourself&nbsp;</a></span>-&nbsp;Please let us know about yourself so we can keep in touch about future job openings!<br /><br /><strong><span class="">NURSE&nbsp;RECRUITMENT&nbsp;HOTLINE:</span>&nbsp;<span class="">718-920-6697 (</span><span class="">Monday-Friday: 9am-4pm)&nbsp;&nbsp;</span></strong><br /><br /><strong>Check Out Our Employee&nbsp;<span style="text-decoration: underline;"><a href="https://healthymebenefits.com/" target="_blank" title="Benefits" rel="noopener noreferrer">Benefits</a></span></strong></h4> <h4 class="p1"><span style="text-decoration: underline;"><strong><a href="https://s3.us-east-1.amazonaws.com/vizi.vizirecruiter.com/MontefioreHealthSystem+RecruitingPractices.pdf" target="_blank" title="Safe Online Recruiting" rel="noopener noreferrer">Our Commitment to Safe Online Recruiting</a></strong></span></h4> https://www.montefiore.org/

keywords: position summary,position details,quality assurance,management,security,technical,support,knowledge,certification,experience,skills,education,communication,proficiency

Full time

$136,000.02-$170,000.03

Overview: <p>Montefiore is ranked among the top hospitals nationally and regionally by U.S. News &amp; World Report. For more than 100 years we have been innovating new treatments, procedures, and approaches to patient care, producing stellar outcomes and raising the bar for academic medical centers in the region and around the world. Our work to improve health outcomes in underserved communities is unparalleled in the United States. Our workforce is among the most diverse in the US: Montefiore associates speak 60+ languages.</p> <p><br /><br />The <strong>Cybersecurity Engineering Manager</strong> leads a team of cybersecurity engineers responsible for designing in collaboration with Cybersecurity Architecture and IT teams, implementing, operating and maintaining technical security controls that protect clinical systems, patient data, and enterprise infrastructure across a large, complex healthcare environment. This role balances hands-on technical leadership, personnel development, and strategic cybersecurity engineering management, ensuring alignment with regulatory requirements (e.g., HIPAA, HITECH, NYSDOH), enterprise risk management goals, and NIST-based frameworks. The manager serves as a technical authority and mentor, overseeing operational effectiveness and resiliency, by partnering with IT, clinical, cloud, and compliance teams to embed security into enterprise platforms and workflows.</p>
Responsibilities: <ul> <li>Manage day-to-day cybersecurity engineering operations.</li> <li>Oversee secure configuration and maintenance of endpoint, network, cloud, and email security tools.</li> <li>Develop and maintain security engineering standards and runbooks.</li> <li>Manage vendor relationships and contract performance.</li> <li>Lead outage response and customer communication during security tool failures that significantly impact business operations.</li> <li>Support audits, risk assessments, and regulatory inquiries.</li> <li>Ensure high availability and resilience of security controls.</li> <li>Continuously mature security engineering capabilities.</li> <li>In partnership with Attack Surface Management personnel, participate in verification and validation testing of security controls across cloud and on-premise environments.</li> <li>Ensure security engineering participation in enterprise change management processes.</li> <li>Define and improve security engineering metrics for resiliency, availability, and operational efficiency.</li> <li>Lead engineering efforts to support third-party risk reduction and secure vendor integrations.</li> <li>Ensure security tooling supports both legacy and emerging technologies.</li> <li>Drive automation and orchestration to reduce manual engineering effort.</li> <li>Champion secure-by-design principles across infrastructure and application teams.</li> <li>Ensure security solutions are stress-tested to validate performance under peak clinical load.</li> </ul>
Requirements: <ul> <li>Bachelor&rsquo;s degree or equivalent work experience.</li> <li>4-6 years' progressive cybersecurity engineering experience, with a focus on team development.</li> <li>4-6 years of hands-on experience implementing and managing security technologies to protect against contemporary threats.</li> <li>4-6 years of experience in leadership: Proven experience leading a team of cybersecurity engineering professionals and coordinating engineering efforts across a large healthcare organization.</li> <li>Proven experience in leading and managing a team of cybersecurity professionals in a 7 x 24 on-call operating model.</li> <li>Ability to motivate and inspire team members, foster a positive and productive work environment.</li> <li>Strong decision-making skills, with the ability to manage multiple tools and competing priorities simultaneously.</li> <li>Advanced knowledge of cybersecurity engineering principles.</li> <li>Strong understanding of cybersecurity threats, attack vectors, and mitigation strategies including Zero Trust and defense-in-depth strategies.</li> <li>Proficiency in using and managing contemporary on premise and cloud-based cybersecurity tools such as internet proxies, employee and vendor remote access technologies, endpoint agents for Endpoint Detection and Response (EDR) and internet client connectors, support of unique anti-phishing platforms and secure file transfer solutions.</li> <li>Strong analytical skills to assess issues with the use of these tools, determine root causes, open support tickets with vendors and implement effective solutions.</li> <li>Experience in handling outages and complications associated with these tools and to be the face of customer service when handling events that impact the business.</li> <li>Excellent communication skills, with the ability to articulate technical issues to both technical and non-technical stakeholders.</li> <li>Familiarity of healthcare regulatory requirements (HIPAA, HITECH, NYSDOH).</li> <li>Knowledge of email security and anti-phishing technologies.</li> <li>Ability to design and implement cloud-native security controls across IaaS, PaaS, and SaaS platforms.</li> <li>Familiarity with secure connectivity between on-premises and cloud environments.</li> <li>Familiarity with Agile methodologies and the use of tools like Confluence and Jira to advance the program.</li> <li>One of the following certifications required or obtained within 12 months of hire: <ul> <li>Certified Information Systems Security Professional (CISSP)</li> <li>Certified Information Security Manager (CISM)</li> <li>Certified Cloud Security Professional (CCSP)</li> <li>GIAC Security Essentials (GSEC)</li> </ul> </li> </ul>