Marathon Health

Marathon Health

Information Security Manager

Remote, USA

Sponsorship not specified$115k-$145kDetected 25 days ago
AWSCybersecurityNetwork SecuritySOC OperationsIncident ResponseComplianceAccountingPerformance ManagementHIPAALeadershipCollaborationMentoring

About the role

  • Marathon Health is a leading advanced primary care provider, partnering with employer and union plan sponsors to improve health for millions of Americans.
  • This role will handle day-to-day management of security operations and continuous compliance monitoring.
  • The manager information security is a hands-on technical role that should be proficient in incident response, threat hunting, vulnerability management, creating automation, and integrating systems into SIEM.

Responsibilities

  • Lead the security team response to security incidents and breaches.
  • Lead security awareness and training programs across the organization, with tailored content for clinical staff handling PHI
  • Manage the prospect, client and 3rd party security assessment fulfillment process.
  • Identify and manage vulnerabilities
  • Developing and implementing comprehensive risk treatment plans to protect Marathon's assets
  • Maintain up-to-date knowledge of emerging technologies and services that will help Marathon maintain its technical edge and evolution
  • Maintain and continuously improve SOC2/HITRUST CSF certification; ensure security control ownership, evidence collection, and audit readiness are operationalized across all responsible domains
  • Manage and enforce a comprehensive information security program covering identity and access management, vulnerability management, endpoint protection, network security, incident response, and third-party risk
  • Marathon is proud to be certified as a Great Place to Work®, reflecting the company's commitment to building an inclusive, high-trust culture where all employees can thrive.

Requirements

  • Experience owning or co-owning HITRUST CSF certification (or equivalent compliance framework such as SOC 2, ISO 27001).
  • Travel is required for up to 15%, team meetings, clinic visits, audit support
  • Demonstrated ability to translate technical infrastructure and security concepts into business risk and value narratives for executive and board audiences
  • Proven track record operating in multi-site, distributed environments
  • Experience with AIOps platforms or AI-augmented IT operations tooling
  • Familiarity with AWS (or comparable cloud) architecture, including security posture management in cloud-native environments
  • Bachelor's degree in computer science, information systems or cybersecurity or related field and a minimum of 2 years' experience in people leadership within security, including serving as the final decision-maker for hiring, development, and performance management, or equivalent combination of education and experience. Experience in healthcare technology, health systems, or digital health, with working knowledge of HIPAA, PHI governance, and clinical system dependencies.
  • HITRUST Certified Common Security Framework Practitioner (CCSFP) or equivalent HITRUST training
  • One or more professional security certifications: CISSP, CISM, or CISA.
  • AWS Security Specialty or equivalent cloud security certification
  • CRISC (Certified in Risk and Information Systems Control)
  • AI governance or responsible AI certifications (e.g., ISACA AI Audit certificate, Certified AI Governance Professional)
  • Experiencing driving vulnerability management across organizations.
  • Experience in value-based care, employer-sponsored healthcare, or population health management organizations
  • ideally 500+ locations

Compensation

  • The actual offer may vary dependent upon geographic location and the candidate's years of experience and/or skill level.
  • This position is also eligible for an annual incentive.
  • We are accepting applications for this position until a candidate has been selected.
  • $115,000 - $145,000/yr

Benefits

  • Learn more at marathon.health
  • Hands-on experience deploying or governing AI tools in a healthcare or clinical environment, including PHI risk controls for AI systems
Apply directly at Marathon Health →Create a free account for alerts like thisView Marathon Health immigration profile

This listing is sourced directly from Marathon Health's careers page and normalized into a canonical job model.