Cybersecurity Program Manager

Cybersecurity Program Manager role at PAM Health, LLC focused on leading enterprise security programs and technology initiatives to protect operations and support patient care.

Responsibilities

• Plan, implement, and continuously improve enterprise cybersecurity programs and security technology initiatives
• Coordinate security deployments with Infrastructure, Support, managed service providers, application teams, and business stakeholders to meet security objectives while minimizing operational disruption
• Assess security solutions for suitability, effectiveness, risk, operational impact, and alignment with PAM Health requirements
• Create phased implementation plans, including project milestones, dependencies, risk controls, communications, and success measures
• Identify significant security and operational risks, recommend controls, and escalate items requiring executive direction
• Manage security vendor relationships, service delivery, performance reviews, remediation commitments, and accountability
• Monitor contracts, service-level agreements, performance metrics, outages, corrective actions, and security provider value
• Coordinate vendor incident response, root-cause analysis, post-incident reviews, remediation plans, and contractual follow-up
• Lead and expand the cybersecurity awareness program, including employee education, phishing awareness, and recurring communications
• Develop security metrics, dashboards, status reports, risk summaries, and executive-level communications
• Formalize and improve cybersecurity program processes, including incident response, governance, documentation, and cross-functional coordination
• Build collaborative relationships across Cybersecurity, technical, clinical, and business teams; translate business needs into secure, practical solutions
• Maintain a forward-looking view of the security technology portfolio and recommend enhancements, replacements, consolidations, or retirements
• Support broader technology and organizational planning; provide cybersecurity leadership when coordinated action is needed
• Promote cooperation, fairness, equity, respect for people and perspectives, empathy, and team performance
• Coach, evaluate, develop, and inspire staff; set expectations and recognize achievements
• Demonstrate accountability and sound judgment in managing company resources; adhere to confidentiality, company values, policies, procedures, and safety guidelines
• Identify problems, involve others in solutions, conduct analysis, implement appropriate responses, and respond promptly to new challenges
• Make clear, consistent decisions with integrity; distinguish relevant from irrelevant information and make timely, appropriate decisions
• Align priorities to company vision; measure outcomes; use feedback to redirect; evaluate alternatives and organize complex issues for resolution
• Communicate effectively in oral and written form, negotiate, actively listen, and share information clearly across teams
• Drive efficient, high-quality performance; maintain resilience during challenging matters; take initiative for improvements
• Motivate others, accept responsibility, maintain morale, develop trust and credibility, and expect honest and ethical behavior
• Encourage collaboration, build effective teams, work in partnership, and remain flexible to others’ needs
• Maintain up-to-date skills through professional organizations and/or continuing education
• Maintain the highest level of customer service with courtesy, compassion, and positive communication
• Promote PAM Health’s mission and vision within the work environment and community
• Respect dignity and confidentiality by following applicable policies and procedures
• Work in a manner that promotes safety, wear clothing appropriate to the role, and participate in OSHA required training
• Follow universal precautions as appropriate; comply with Employee Health requirements for continued employment; report unsafe practices; know own role in case of an emergency

Requirements

• 10 (ten) years of progressive information technology experience, including at least 5 (five) years in cybersecurity
• 3 (three) years leading cybersecurity programs, enterprise technology initiatives, or comparable cross-functional projects
• Experience managing security vendors, service providers, contracts, service-level agreements, performance metrics, and remediation commitments
• Experience coordinating enterprise security technology deployments across infrastructure, endpoint, network, application, and business teams
• Experience creating security awareness communications, program metrics, and executive-level reports
• Strong program and project management skills, including planning, prioritization, dependency management, risk tracking, and delivery oversight
• Ability to evaluate cybersecurity technologies and services for effectiveness, operational impact, business fit, and risk
• Knowledge of security operations, incident response, security awareness, vendor management, enterprise infrastructure, and common cybersecurity controls
• Ability to translate technical and security risk into clear business impact, recommendations, and decisions for executive and non-technical audiences
• Strong written and verbal communication, negotiation, relationship management, and cross-functional leadership skills
• Sound judgment, accountability, initiative, and ability to lead through influence while balancing security requirements with operational needs

Education and Training

• Required: Bachelor’s degree in Cybersecurity, Information Technology, Information Systems, Business Administration, Project Management, or related field, or an equivalent combination of education and experience
• Preferred: Master’s degree in Cybersecurity, Information Technology, Business Administration, or related field
• Preferred Certifications: PMP, CISSP, CISM, or comparable cybersecurity, program management, or vendor management certification

Experience (Additional)

• Preferred: Cybersecurity experience in healthcare, a health system, or another regulated environment
• Preferred: Experience building or maturing cybersecurity awareness, incident response, governance, metrics, or vendor management programs
• Preferred: Experience supporting a geographically distributed, multi-facility organization
• Preferred: Prior infrastructure, networking, support, systems, or application experience that supports practical evaluation of operational impact

Working Conditions

• Location: Plano, TX (onsite)
• Remote position with travel up to 15% to facilities across the enterprise
• Facility visits occur in operating clinical environments and may require compliance with facility access, screening, and health requirements
• Work performed indoors in well-lighted, well-ventilated areas, with potential exposure to hospital clinical surroundings during visits
• May be required to coordinate response to significant security incidents outside standard business hours

Organizational Data

• Exempt position supervised by the Chief Information Security Officer
• No formal line of promotion exists