Covenant Health · 12 hours ago
Manager of Cybersecurity, IT Cybersecurity
Covenant Health is the region’s top-performing healthcare network with a commitment to improving the quality of life for its patients. The Manager of Cybersecurity is responsible for overseeing the cybersecurity team, ensuring the protection of sensitive data, and driving operational performance while managing cybersecurity tools and systems. This role involves strategic planning, vendor management, and compliance with regulations like HIPAA.
Health CareHealth InsuranceHome Health Care
Responsibilities
Leadership: Direct and provide leadership to all cybersecurity staff, including Security Engineers, Analysts, Incident Responders, and Compliance Specialists
Change Agent: Support and lead the efforts to change team cultures, dynamics, processes, and technologies that provide modern solutions to the organization
Team Management: Lead cybersecurity team to ensure performance management and career development. Provide technical leadership and direction, delegate responsibilities appropriately, and identify technical and management development opportunities. Works closely with other leaders throughout IT and the organization to education, inform, and assist their understand and acceptance of Cybersecurity efforts and controls
Staff Development: Provide leadership, development, coaching, and guidance to ensure the appropriate departmental developmental goals are set and achieved
Ongoing Continuous Development: Champion innovative efforts and stay abreast of leading-edge solutions for recruitment, development, and retention of the cybersecurity workforce
Cybersecurity Operations
Operations Oversight: Oversee the day-to-day operations of cybersecurity measures, including monitoring, detection, and response to security incidents
Incident Response: Lead the incident response team in managing and resolving security breaches and incidents
Compliance: Ensure compliance with HIPAA and other relevant regulations and standards
Technical Implementation: Lead technical implementation projects related to cybersecurity, creating plans and strategies to meet the needs of the organization
Continuous Improvement: Stay informed about emerging technologies and industry trends, making recommendations for improvement
Strategic Planning & Implementation
Strategic Planning: Work with the CISO and IT leadership to maintain strategic cybersecurity roadmaps, provide tactical action plans, and ensure optimum planning of cybersecurity projects and resources
Resource Planning: Conduct proactive resource planning based on anticipated demand
Milestone Establishment: Establish deliverables and projected milestones for solution delivery in partnership with business leaders and Senior Executives
Technical Roadmap : Lead the development of cybersecurity strategies and technical roadmap, ensuring integration with overall IT and organizational strategies
Vendor & Budget Management
Vendor Management: Manage relationships with cybersecurity vendors, ensuring that contracts and agreements are in place and that vendor performance meets organizational standards
Budget Management: Develop annual operating budgets and long-term capital budgets for cybersecurity projects
Operational Efficiency
Performance Monitoring: Monitor network and systems performance, ensuring availability and reliability. Perform capacity planning
Service Management: Oversee operational and service management processes to ensure performance of all technology subcontractors
Collaboration & Relationship Building
Collaboration: Collaborate with other IT teams and clinical IT teams to ensure alignment and integration of cybersecurity services within the health system
Relationship Building: Develop relationships with key business leaders to identify service gaps and propose solutions. Maintain credibility with key individuals at hospitals and corporate offices, along with Legal, HR, and Privacy/Compliance
Security Awareness & Training Programs
Training Programs: Develop and implement security awareness and training programs for employees to ensure they understand and adhere to cybersecurity policies and procedures
Third-Party Risk Management
Risk Management: Oversee the assessment and management of cybersecurity risks associated with third-party vendors, partners, and bio-medical devices
Policy Development & Enforcement
Policy Development: Develop, implement, and enforce cybersecurity policies, standards, and procedures to ensure compliance with regulatory requirements and industry best practices
Security Architecture & Design
Architecture and Design: Lead the design and implementation of secure network architectures and systems to protect sensitive data and ensure the integrity of IT infrastructure
Incident Management & Forensics
Incident Management: Oversee incident management and forensic investigations to identify root causes, mitigate risks, and prevent future incidents
Regulatory Compliance
Regulatory Compliance: Ensure compliance with relevant regulations such as HIPAA, HITECH, and other healthcare-specific cybersecurity requirements
Business Continuity & Disaster Recovery
Continuity and Recovery: Develop and maintain business continuity and disaster recovery plans to ensure the organization can quickly recover from cybersecurity incidents
Local travel required
Follows policies, procedures, and safety standards. Completes required education assignments annually. Works toward achieving goals and objectives, and participates in quality improvement initiatives as requested
Performs other duties as assigned
Qualification
Required
Bachelor's degree or equivalent experience in cybersecurity, information technology, or a related field is required
Minimum of five (5) years of technology /IT/security experience with five (5) years leading cybersecurity, within an enterprise-sized organization, is required
Company
Covenant Health
Covenant Health is a top-performing healthcare network company located in Knoxville.
Funding
Current Stage
Late StageRecent News
Morningstar.com
2025-12-19
Morningstar.com
2025-10-02
Company data provided by crunchbase