Manager, Information Security - IS Mod

The Manager, Information Security leads the operational and incident-response function within the Information Protection – Network Security (IP-NS) team, with direct people leadership of security engineers, analysts, and Level 2 support staff supporting a 24×7 security service portfolio (Zscaler ZIA/ZPA, Imprivata VAM, and Legacy Remote Access tools). The successful candidate will bring proven operational oversight of high-volume environments, including on-call management, and ITSM change discipline and oversight. Strong vendor management experience is required — including strategic security vendor relationships (Zscaler, F5, Imprivata or comparable), SLA governance — along with demonstrated ownership of department metrics such as KRIs, SLA adherence, on-call utilization, and change success rate. The role also partners closely on budget stewardship for the CyberSecurity Engineering/Tools portfolio, including forecasting, variance analysis, contract and renewal calendar management, invoice validation, and tool rationalization. Ability to operate effectively in a hybrid work environment, including participation in on-site work-related events, team collaboration sessions, and key organizational activities as required. This is a hybrid position and the incumbent must live within 100 miles of a Mayo Clinic campus. Mayo Clinic will not sponsor or transfer visas for this position including F1 OPT STEM. Bachelors degree in applicable field plus eight (8) years of relevant experience. Pertinent fields of study and experience include, but are not limited to, information security, computer science, information systems, risk management, or a related field. Three years leadership/management experience (i.e. guiding technical staff, leading technical projects, or leading teams). Master’s degree in applicable field plus six (6) years of relevant experience preferred. Pertinent fields of study and experience include, but are not limited to, information security, computer science, information systems, risk management, or a related field. Three years leadership/management experience (i.e. guiding technical staff, leading technical projects, or leading teams). One or more of the following certifications (or equivalent) are required at time of hire: CISSP, CISM, GSEC, OSCP..