Information Security Manager

Responsibilities

• Administer Microsoft Entra ID / Active Directory, including users, groups, conditional access, and MFA
• Design, implement, and maintain single sign-on (SSO) integrations (SAML / OIDC)
• Operate and tune SIEM tools such as Microsoft Sentinel
• Triage and investigate security alerts and participate in incident response
• Maintain SOC 2 and URAC compliance through evidence collection and control mapping
• Lead efforts toward HITRUST CSF certification
• Administer Microsoft Purview for data loss prevention, classification, and retention
• Conduct vendor security assessments and manage third-party risk
• Create and maintain security documentation including policies, standards, and runbooks

Requirements

• Bachelor's degree in Computer Science, Information Security, or related field
• 4–7 years in information security or security engineering
• Hands-on experience with Microsoft security stack (Entra ID, Microsoft 365, Azure)
• Experience with compliance frameworks like SOC 2, HITRUST, URAC, or HIPAA
• Experience with IAM, SSO, SIEM operations, and data governance
• Experience with vendor security assessments
• Willingness to travel 10%-20%

Preferred Qualifications

• Healthcare, PBM, or regulated-industry experience
• CISSP, CISM, or CompTIA Security+ certifications
• Microsoft SC-200, SC-300, or AZ-500 certifications
• HITRUST CCSFP certification

About the Company

AffirmedRx is on a mission to improve health care outcomes by bringing clarity, integrity, and trust to pharmacy benefit management through state-of-the-art technology.