Information Security Manager at Habitat Health
United States
<div class="content-intro"><p><span data-contrast="none">Habitat Health empowers older adults to experience more good days in their homes and communities. Through the Program of All-Inclusive Care for the Elderly (PACE), we provide comprehensive medical care along with support for daily needs such as meals, transportation, and in</span>‑<span data-contrast="none">home assistance. We deliver coordinated clinical and social care in our centers and directly in participants’ homes, creating a fully integrated experience that brings peace of mind and a true sense of belonging. As we expand our scalable, affordable PACE model to meet the growing and complex needs of aging populations, our mission</span>‑<span data-contrast="none">driven care teams continue to help participants live well on their own terms.</span><span data-ccp-props="{"335559738":200,"335559739":200}"> </span></p> <p><span data-contrast="none">Habitat Health is supported by leading healthcare organizations and investors including New Enterprise Associates, Kaiser Permanente, and Town Hall Ventures. We are entering a period of significant growth and are looking for exceptional teammates to help us scale a better model of care for older adults. To learn more, visit www.habitathealth.com.</span></p></div><p><span data-contrast="auto">We are looking for a qualified, hands-on Information Security Manager to design, implement, and operate the information security program for our growing healthcare organization operating under the PACE model. </span> <span data-contrast="auto">This role blends strategic security leadership with practical execution. The ideal candidate can translate high regulatory and partner security standards into right-sized, pragmatic controls, while building sustainable governance, oversight, and audit processes.</span><span data-ccp-props="{"335559738":200,"335559739":200}"> </span></p> <ul> <li data-leveltext="●" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1"><span style="text-decoration: underline;"><span data-contrast="none">Deploy HIPAA aligned best practice security architecture across our Microsoft 365 environment and Meraki based WAN</span></span><span data-ccp-props="{"134245417":false,"201341983":0,"335559740":240}"> </span> <ul> <li><span data-contrast="auto">Define, implement, and maintain administrative, technical, and physical security controls appropriate for a PACE organization</span></li> <li>Own security design decisions and control selection, balancing risk, regulatory requirements, and operational realities<span data-ccp-props="{"134245417":false,"201341983":0,"335559740":240}"> </span></li> </ul> </li> </ul> <ul> <li data-leveltext="●" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"multilevel"}" data-aria-posinset="2" data-aria-level="1"><span data-contrast="auto">Security monitoring and incident response: configure and monitor tools, logs, and alerts, analyze activity, and investigate potential security incidents</span><span data-ccp-props="{"134245417":false,"201341983":0,"335559740":240}"> </span> <ul> <li><span data-contrast="auto">Serve as primary security escalation point for internal teams and external partners</span></li> <li>Lead incident response planning, tabletop exercises, post-incident reviews, and remediation tracking<span data-ccp-props="{"134245417":false,"201341983":0,"335559740":240}"> </span></li> </ul> </li> </ul> <ul> <li data-leveltext="●" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"multilevel"}" data-aria-posinset="3" data-aria-level="1"><span data-contrast="auto">Perform vulnerability management activities, based on internal and external scans, and coordinate remediation activities</span><span data-ccp-props="{"134245417":false,"201341983":0,"335559740":240}"> </span> <ul> <li><span data-contrast="auto">Maintain an enterprise security risk register, including risk scoring, mitigation plans, and executive-level reporting</span><span data-ccp-props="{"134245417":false,"201341983":0,"335559740":240}"> </span></li> <li data-leveltext="○" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":1440,"335559991":360,"469769242":[9675],"469777803":"left","469777804":"○","469777815":"multilevel"}" data-aria-posinset="2" data-aria-level="2"><span data-contrast="auto">Support business continuity and disaster recovery security requirements in partnership with IT and Operations</span><span data-ccp-props="{"134245417":false,"201341983":0,"335559740":240}"> </span></li> </ul> </li> </ul> <ul> <li data-leveltext="●" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"multilevel"}" data-aria-posinset="4" data-aria-level="1"><span style="text-decoration: underline;"><span data-contrast="none">Lead Access and Identify management, developing best practice procedures, and enabling others to work within these processes</span></span><span data-ccp-props="{"134245417":false,"201341983":0,"335559740":240}"> </span> <ul> <li><span data-contrast="auto">Oversee privileged access, role-based access controls, joiner/mover/leaver processes, and periodic access reviews</span><span data-ccp-props="{"134245417":false,"201341983":0,"335559740":240}"> </span></li> <li data-leveltext="○" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":1440,"335559991":360,"469769242":[9675],"469777803":"left","469777804":"○","469777815":"multilevel"}" data-aria-posinset="2" data-aria-level="2"><span data-contrast="auto">Ensure appropriate data protection controls for PHI, including encryption, logging, and monitoring</span><span data-ccp-props="{"134245417":false,"201341983":0,"335559740":240}"> </span></li> </ul> </li> </ul> <ul> <li data-leveltext="●" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"multilevel"}" data-aria-posinset="5" data-aria-level="1"><span style="text-decoration: underline;"><span data-contrast="none">Draft, maintain, and enforce security policies, standards, and procedures aligned to HIPAA, NIST, and partner requirement</span><span data-ccp-props="{"134245417":false,"201341983":0,"335559740":240}"> </span></span> <ul> <li><span data-contrast="none">Design and operate recurring security oversight and audit processes, including evidence collection and remediation tracking</span><span data-ccp-props="{"134245417":false,"201341983":0,"335559740":240}"> </span></li> <li data-leveltext="○" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":1440,"335559991":360,"469769242":[9675],"469777803":"left","469777804":"○","469777815":"multilevel"}" data-aria-posinset="2" data-aria-level="2"><span data-contrast="none">Lead and coordinate internal and external security audits, assessments, and partner security reviews</span><span data-ccp-props="{"134245417":false,"201341983":0,"335559740":240}"> </span></li> </ul> </li> </ul> <ul> <li data-leveltext="●" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"multilevel"}" data-aria-posinset="6" data-aria-level="1"><span style="text-decoration: underline;"><span data-contrast="none">Establish and manage a third-party security and risk management program, including vendor risk assessments and ongoing monitoring</span></span><span data-ccp-props="{"134245417":false,"201341983":0,"335559740":240}"> </span></li> </ul> <ul> <li data-leveltext="●" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"multilevel"}" data-aria-posinset="7" data-aria-level="1"><span style="text-decoration: underline;"><span data-contrast="none">Partner closely with IT, Compliance, Legal, Clinical, and Operations teams to embed security into daily workflows</span></span></li> </ul> <p><strong><span data-contrast="auto">Qualifications: </span></strong><span data-ccp-props="{"335559738":200,"335559739":200}"> </span></p> <ul> <li data-leveltext="●" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"multilevel"}" data-aria-posinset="8" data-aria-level="1"><span data-contrast="auto">Bachelor’s degree in Computer Science with an emphasis on Information Security, or equivalent experience.</span></li> <li data-leveltext="●" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"multilevel"}" data-aria-posinset="8" data-aria-level="1">7+ years of progressive experience in information security or cybersecurity roles, including hands-on implementation.</li> <li data-leveltext="●" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"multilevel"}" data-aria-posinset="8" data-aria-level="1">3–5 years of experience owning or leading security programs, controls, or governance functions<span data-contrast="auto"> including hands</span>‑<span data-contrast="auto">on experience in implementing information security best practices, and experience with security monitoring, incident response, or vulnerability management.</span></li> <li data-leveltext="●" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"multilevel"}" data-aria-posinset="8" data-aria-level="1">Practical experience in a Health Care organization, and expertise in industry regulatory and standards frameworks (HIPAA, NIST, etc).</li> <li data-leveltext="●" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"multilevel"}" data-aria-posinset="8" data-aria-level="1">Experience in cloud-based environments, specifically Microsoft 365. <span data-ccp-props="{"134245417":false,"201341983":0,"335559740":240}"> </span></li> <li data-leveltext="●" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"multilevel"}" data-aria-posinset="8" data-aria-level="1">Experience in networking concepts, operating systems, and cloud environments.</li> <li data-leveltext="●" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"multilevel"}" data-aria-posinset="8" data-aria-level="1">Familiarity with regulatory and standards frameworks (HIPAA, NIST, etc.).</li> <li data-leveltext="●" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"multilevel"}" data-aria-posinset="8" data-aria-level="1">Strong analytical and problem‑<span data-contrast="auto">solving skills with attention to detail.</span></li> <li data-leveltext="●" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"multilevel"}" data-aria-posinset="8" data-aria-level="1">Ability to lead through influence and communicate complex issues clearly to technical and non‑<span data-contrast="auto">technical audiences.</span></li> <li data-leveltext="●" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"multilevel"}" data-aria-posinset="8" data-aria-level="1">Must live in CA.</li> <li data-leveltext="●" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"multilevel"}" data-aria-posinset="8" data-aria-level="1">Travel Requirement up to 2 weeks per quarter (to visit sites).<span data-ccp-props="{"134245417":false,"201341983":0,"335559740":240}"> </span></li> </ul> <p><strong><span data-contrast="auto">Nice to haves </span></strong><span data-ccp-props="{"134245417":false,"201341983":0,"335559739":200,"335559740":312}"> </span></p> <ul> <li data-leveltext="●" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"multilevel"}" data-aria-posinset="19" data-aria-level="1"><span data-contrast="auto">Experience in a start up organization.</span></li> <li data-leveltext="●" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"multilevel"}" data-aria-posinset="19" data-aria-level="1">Experience supporting audits, partner security assessments, or SOC/HIPAA readiness efforts.</li> <li data-leveltext="●" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"multilevel"}" data-aria-posinset="19" data-aria-level="1">Experience in creating technology solutions based on business requirements.</li> <li data-leveltext="●" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"multilevel"}" data-aria-posinset="19" data-aria-level="1">Experience working remotely – this is a remote position. <span data-ccp-props="{"134245417":false,"201341983":0,"335559740":240}"> </span></li> <li data-leveltext="●" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"multilevel"}" data-aria-posinset="19" data-aria-level="1">Professional certifications such as CISSP, CISM, CISA, or Security+ (preferred).</li> <li data-leveltext="●" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"multilevel"}" data-aria-posinset="19" data-aria-level="1">A strong connection to the mission of our business.</li> <li data-leveltext="●" data-font="Poppins" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"●","469777815":"multilevel"}" data-aria-posinset="19" data-aria-level="1">Experience working with technology managed service providers.<span data-ccp-props="{"134245417":false,"201341983":0,"335559740":240}"> </span></li> </ul><div class="content-conclusion"><p><strong><span data-contrast="none">Vaccination Policy, including COVID-19</span></strong></p> <p><span data-contrast="auto">To help maintain a safe environment for our participants and team members, Habitat Health maintains vaccination and infection control policies applicable to certain roles and work locations. For COVID-19 and influenza, team members who are working in a participant care setting are required to provide either proof of vaccination or a signed declination form and comply with applicable masking requirements while in a care setting to the extent permitted by law in the applicable jurisdiction.</span><span data-ccp-props="{"335559738":200,"335559739":200}"> </span></p> <p><span data-contrast="auto">Habitat Health will consider requests for reasonable accommodation based on an applicant's disability, medical condition, or sincerely held religious belief, practice, or observance in accordance with applicable law.</span><span data-ccp-props="{"335559738":200,"335559739":200}"> </span></p> <p><span data-contrast="auto">As a condition of employment, team members are expected to comply with all applicable infection control protocols, personal protective equipment (PPE) requirements, and vaccination requirements associated with their role and work location, and to the extent required by law and as permitted in the applicable jurisdiction.</span><span data-ccp-props="{"335559738":200,"335559739":200}"> </span></p> <p><strong><span data-contrast="none">Our Commitment to Equal Opportunity and Inclusion</span></strong></p> <p><span data-contrast="auto">Habitat Health is an Equal Opportunity Employer committed to the principles of equal opportunity and inclusion. Employment decisions at Habitat Health are based on qualifications, merit, and business needs. We do not discriminate on the basis of race, color, religion, creed, sex, gender (including pregnancy, childbirth, breastfeeding, and related medical conditions), gender identity, gender expression, sexual orientation, marital status, registered domestic partner status, age, national origin, ancestry, citizenship, military or veteran status, physical or mental disability, medical condition, genetic information, reproductive health decision-making, or any other characteristic protected by applicable federal, state, or local law.</span><span data-ccp-props="{"335559738":200,"335559739":200}"> </span></p> <p><span data-contrast="auto">Habitat Health is committed to the full inclusion of all qualified individuals. Consistent with applicable law, we provide reasonable accommodations to qualified individuals with disabilities and to individuals with religious beliefs, practices, or observances that require accommodation.</span><span data-ccp-props="{"335559738":200,"335559739":200}"> </span></p> <p><span data-contrast="auto">If you require a reasonable accommodation to participate in the application or interview process, perform the essential functions of a position, or receive other employment benefits and privileges, please contact us at </span><a href="mailto:careers@habitathealth.com"><span data-contrast="none"><span data-ccp-charstyle="Hyperlink">careers@habitathealth.com</span></span></a><span data-contrast="auto">.</span><span data-ccp-props="{"335559738":200,"335559739":200}"> </span></p> <p><span data-contrast="auto">We encourage individuals from all backgrounds to apply, even if their experience does not align perfectly with every qualification listed.</span><span data-ccp-props="{"335559738":200,"335559739":200}"> </span></p> <p><strong><span data-contrast="none">E-Verify Participation Notice </span></strong><span data-ccp-props="{"335559738":240,"335559739":240}"> </span></p> <p><span data-contrast="auto">Habitat Health participates in E-Verify and will provide the federal government with information from your Form I-9 to confirm your authorization to work in the United States.</span><span data-ccp-props="{"335559738":240,"335559739":240}"> </span></p> <p><span data-contrast="auto">If E-Verify cannot confirm your authorization to work, Habitat Health will provide you with written instructions and an opportunity to contact the Department of Homeland Security (DHS) and/or the Social Security Administration (SSA) to resolve the issue before any adverse employment action is taken, including termination of employment.</span><span data-ccp-props="{"335559738":240,"335559739":240}"> </span></p> <p><span data-contrast="auto">E-Verify is used only after an applicant has accepted an offer of employment and completed the Form I-9 and to the extent permitted by applicable law.</span><span data-ccp-props="{"335559738":240,"335559739":240}"> </span></p> <p><span data-contrast="auto">Habitat Health complies with all federal and state employment eligibility verification requirements.</span><span data-ccp-props="{"335559738":240,"335559739":240}"> </span></p> <p><strong><span data-contrast="none">Beware of Scams and Fraud </span></strong><span data-ccp-props="{"335559738":200,"335559739":200}"> </span></p> <p><span data-contrast="auto">Habitat Health is committed to protecting job seekers from recruitment scams. Please ensure that you submit applications only through Habitat Health's official careers website or authorized job boards.</span><span data-ccp-props="{"335559738":200,"335559739":200}"> </span></p> <p><span data-contrast="auto">Official communications from Habitat Health recruiters and team members will come from email addresses ending in @habitathealth.com. Habitat Health will never ask applicants to pay fees, purchase equipment, or provide sensitive financial information as part of the recruiting or hiring process.</span><span data-ccp-props="{"335559738":200,"335559739":200}"> </span></p> <p><span data-contrast="auto">If you receive suspicious communications claiming to represent Habitat Health, we encourage you to exercise caution and independently verify the communication before responding.</span><span data-ccp-props="{"335559738":200,"335559739":200}"> </span></p> <p><span data-contrast="auto">If you believe you have been the victim of a recruitment scam or fraudulent job posting, please report the incident to the Federal Trade Commission (FTC) through its fraud reporting website at reportfraud.ftc.gov.</span><span data-ccp-props="{"335559738":200,"335559739":200}"> </span></p></div>
Apply Now
