Senior Manager, IT Security

Job not on LinkedIn

🔥 50 minutes ago

🇺🇸 United States – Remote

💵 $144.4k - $216.6k / year

⏰ Full Time

🟠 Senior

💻 IT Support

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 21 days.

Apply Now

Find Similar Remote Jobs

Castlight Health

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2008

💼 Consulting

🛡️ Insurance

📦 Logistics

Consulting • Insurance • Logistics

Castlight Health is a healthcare navigation company that offers a SaaS-based benefits and care navigation platform for employers, health plans, benefit consultants, and digital health partners. The company centralizes employees' health and wellbeing programs in a single digital hub, leveraging aggregated data, integrations, and machine learning alongside live Care Guides and clinical experts to drive engagement, improve preventive care, and reduce costs. Castlight partners with enterprise customers and payers to connect ecosystems of digital health vendors and deliver measurable outcomes such as increased screening, higher wellness visit rates, and medical spending reductions.

📋 Description

• Lead, coach, and support a dedicated security team across SecOps, AppSec, CloudSec, and GRC • Oversee security operations capabilities, including SOAR, infrastructure hardening, vulnerability management, and patch management coordination • Represent Castlight’s security posture to prospective and current customers • Address security provisions in contracts, guide technical responses for complex RFPs, and lead security defense calls with client CISOs and risk teams • Serve as the primary technical bridge to customers during security issues or critical vulnerabilities • Translate technical remediation into executive-ready communication alongside the CISO and Engineering leadership • Conduct technical reviews and guide AppSec standards across GitHub Actions and deployment pipelines • Shape secure cloud infrastructure patterns on Google Cloud Platform • Partner with the internal audit team to embed controls and maintain alignment with SOC 2, HITRUST, and NIST standards • Oversee vulnerability management and incident response escalations • Coordinate containment, remediation, and recovery from emerging threats • Define and track SecOps KPIs, including vulnerability remediation timelines, patch compliance, and security configuration drift

🎯 Requirements

• 7+ years of progressive information security experience, including demonstrated success leading, coaching, and mentoring technical security engineers in a player-coach capacity • Proven capability to interact directly with enterprise customer security leaders, procurement specialists, and health plan CISOs • Experience reviewing security contract terms, supporting enterprise RFPs, and articulating complex security postures to external stakeholders • Hands-on experience with Application Security, including DAST, secure SDLC, and CI/CD pipeline controls • Cloud Security architecture experience, with emphasis on cloud platforms and containerized/microservice ecosystems • Working knowledge of SOC 2, HITRUST, and NIST frameworks, with a track record of implementing technical controls and supporting auditability • Exceptional communication and presentation skills, with the ability to explain root cause, blast radius, and remediation roadmaps to client leadership • Demonstrated ability to partner effectively with Engineering, Product, Legal, and executive leadership

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume