Marathon Health

Marathon Health

Information Security Manager

Remote, USA · Mid

Sponsorship not specified$115k-$145kDetected 120 days ago
AWSCybersecurityNetwork SecuritySOC OperationsIncident ResponseComplianceAccountingPerformance ManagementHIPAALeadershipCollaborationMentoringCISSP

Stay score

odds of building a lasting career here

54Sponsors, lottery-bound
Cap-exempt (no lottery)0
Sponsors this role80
Entry-level history0
PERM / green-card track0
Lottery odds (Level III)83
Fits your clock70

Sponsors, but it's cap-subject — you still face the weighted lottery (~45% per draw at Level III). Good if you win; have a cap-exempt backup on your list.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Employer immigration record

from this employer's Department of Labor filings

Files H-1B transfers

1 transfer filing in the last year, covering 1 worker. Median labor-condition decision: 7 days. An employer that already files transfers is one that can take over an existing H-1B.

Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • Marathon Health is a leading advanced primary care provider, partnering with employer and union plan sponsors to improve health for millions of Americans.
  • This role will handle day-to-day management of security operations and continuous compliance monitoring.
  • The manager information security is a hands-on technical role that should be proficient in incident response, threat hunting, vulnerability management, creating automation, and integrating systems into SIEM.

Responsibilities

  • Lead the security team response to security incidents and breaches.
  • Lead security awareness and training programs across the organization, with tailored content for clinical staff handling PHI
  • Manage the prospect, client and 3rd party security assessment fulfillment process.
  • Identify and manage vulnerabilities
  • Developing and implementing comprehensive risk treatment plans to protect Marathon's assets
  • Maintain up-to-date knowledge of emerging technologies and services that will help Marathon maintain its technical edge and evolution
  • Maintain and continuously improve SOC2/HITRUST CSF certification; ensure security control ownership, evidence collection, and audit readiness are operationalized across all responsible domains
  • Manage and enforce a comprehensive information security program covering identity and access management, vulnerability management, endpoint protection, network security, incident response, and third-party risk
  • Marathon is proud to be certified as a Great Place to Work®, reflecting the company's commitment to building an inclusive, high-trust culture where all employees can thrive.

Requirements

  • Experience owning or co-owning HITRUST CSF certification (or equivalent compliance framework such as SOC 2, ISO 27001).
  • Travel is required for up to 15%, team meetings, clinic visits, audit support
  • Demonstrated ability to translate technical infrastructure and security concepts into business risk and value narratives for executive and board audiences
  • Proven track record operating in multi-site, distributed environments
  • Experience with AIOps platforms or AI-augmented IT operations tooling
  • Familiarity with AWS (or comparable cloud) architecture, including security posture management in cloud-native environments
  • The actual offer may vary dependent upon geographic location and the candidate's years of experience and/or skill level.
  • Bachelor's degree in computer science, information systems or cybersecurity or related field and a minimum of 2 years' experience in people leadership within security, including serving as the final decision-maker for hiring, development, and performance management, or equivalent combination of education and experience. Experience in healthcare technology, health systems, or digital health, with working knowledge of HIPAA, PHI governance, and clinical system dependencies.
  • HITRUST Certified Common Security Framework Practitioner (CCSFP) or equivalent HITRUST training
  • One or more professional security certifications: CISSP, CISM, or CISA.
  • AWS Security Specialty or equivalent cloud security certification
  • CRISC (Certified in Risk and Information Systems Control)
  • AI governance or responsible AI certifications (e.g., ISACA AI Audit certificate, Certified AI Governance Professional)
  • Experiencing driving vulnerability management across organizations.
  • Experience in value-based care, employer-sponsored healthcare, or population health management organizations
  • ideally 500+ locations

Compensation

  • $115,000 - $145,000/yr
  • This position is also eligible for an annual incentive.

Benefits

  • Learn more at marathon.health
  • Lead Marathon Health's internal and outsourced security teams to execute on the roadmap defined by our CISO
  • Monitor compliance with HIPAA, SOC 2, state-level data privacy regulations, and contractual security requirements across all employer and health plan clients
  • To apply to this position and learn more about open jobs at Marathon Health, visit our careers page.

Company info

  • We are accepting applications for this position until a candidate has been selected.
Apply directly at Marathon Health →Create a free account for alerts like thisView Marathon Health immigration profile

This listing is sourced directly from Marathon Health's careers page and normalized into a canonical job model.