Manager - Network & Cyber Security

Job description

Job Summary Lead the development and operation of the IAM program, strategy, and team. Provide governance to manage and proactively identify issues and changes in the risk profile in the Identity and Access Management space. Job Description Manager - Network & Cyber Security Role Overview Lead Medline's Network security & Cyber Security functions by driving security strategy, network security operations, threat and vulnerability management, incident response, and cloud security across hybrid and multi-cloud environments. Partner with cross-functional teams to deliver resilient, compliant, and scalable security solutions aligned with business objectives. Key Responsibilities Lead, mentor, and develop the Network & Cyber Security team by setting performance goals, providing coaching, and fostering a culture of accountability, continuous learning, and operational excellence. Define and execute the enterprise network and cybersecurity strategy, roadmap, and service improvement initiatives aligned with business objectives and evolving security threats. Manage day-to-day security operations, including threat detection and monitoring, incident response, vulnerability management, security assessments, risk remediation, and major security incident escalations. Design, implement, and support secure network and cloud architectures across on-premises, hybrid, and multi-cloud environments (AWS, Azure, and GCP), including firewalls, Secure Web Gateways (SWG/SSE), VPN, DDoS protection, network segmentation, and cloud-native security controls. Develop, implement, and maintain enterprise security policies, standards, procedures, and technical baselines while ensuring compliance with regulatory and industry frameworks such as HIPAA, HITRUST, NIST, and other applicable standards. Lead security governance activities, including internal and external audits, third-party security assessments, software security reviews, certification support, and validation of security controls. Establish and monitor security KPIs, SLAs, operational metrics, and cybersecurity reporting to measure performance, drive continuous improvement, and communicate security posture and risks to executive leadership and key stakeholders. Partner with Infrastructure, Cloud, Application, Audit, Compliance, and business teams to integrate security into technology initiatives, ensure secure solution design, and deliver resilient, scalable security capabilities. Drive security awareness and education initiatives, including phishing simulations and organization-wide cybersecurity training, to strengthen the overall security culture. Evaluate emerging cybersecurity threats, technologies, and industry trends to continuously enhance the organization's security capabilities while ensuring cost-effective delivery of security services. Skills & Knowledge Requirements Experience & Leadership 12+ years of experience in Network Security, Cyber Security, or Information Security, including 3+ years in a leadership or management role, leading security engineering, SOC, and operations teams. Strong leadership, stakeholder management, communication, crisis management, project management, and decision-making skills, with experience driving team development, training, and cross-functional collaboration. Deep expertise in enterprise network and cybersecurity architecture, including TCP/IP, traffic analysis, next-generation firewalls, VPNs, Secure Web Gateways (SWG/SSE), SASE, Zero Trust, and secure remote access technologies. Hands-on experience with leading security technologies such as Palo Alto Networks, Zscaler (ZIA/ZPA), Check Point, Cisco Security, Cloudflare, Illumio, CrowdStrike, ExtraHop (or other NDR solutions), Web Application Firewalls (WAF), Email Security Gateways, Data Loss Prevention (DLP), Identity & Access Management (IAM), Privileged Access Management (PAM/PIM), and related security platforms. Strong experience securing on-premises, hybrid, and multi-cloud environments (AWS, Azure, and GCP), including cloud-native security capabilities for IaaS, PaaS, and SaaS. Proven expertise in security operations, including threat detection and hunting, incident response, vulnerability management, log analysis, event correlation, third-party risk management, and defining remediation strategies. Extensive knowledge of security governance, risk management, and compliance frameworks, including NIST, HIPAA, HITRUST, ITGC, and industry best practices, with experience supporting audits, risk assessments, and regulatory compliance. Experience developing and maintaining enterprise security policies, standards, procedures, technical baselines, and governance frameworks to strengthen organizational security posture. Strong understanding of cybersecurity risk, business continuity, security controls, and emerging threat landscapes, with the ability to align security initiatives to business objectives. Academic & Professional Qualifications Bachelor's degree in Computer Science, Information Security, or a related discipline. Preferred professional certifications include CISSP, CISM, and vendor certifications from Palo Alto Networks, Zscaler, Check Point, CyberArk, CrowdStrike Cisco, or equivalent cloud and security technologies. Click here to learn more about a career in IT at Medline! Our benefit package includes health insurance, life and disability, 401(k) contributions, paid time off, etc., for employees working 30 or more hours per week on average. For a more comprehensive list of our benefits please click here. For roles where employees work less than 30 hours per week, benefits include 401(k) contributions as well as access to the Employee Assistance Program, Employee Resource Groups and the Employee Service Corp. We’re dedicated to creating a Medline where everyone feels they belong and can grow their career. We strive to do this by seeking diversity in all forms, acting inclusively, and ensuring that people have tools and resources to perform at their best. Explore our Belonging page here . Medline Industries, LP is an equal opportunity employer. Medline evaluates qualified individuals without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, age, disability, neurodivergence, protected veteran status, marital or family status, caregiver responsibilities, genetic information, or any other characteristic protected by applicable federal, state, or local laws.