IT Security Manager (FT) | MIS | Ames | 2026-094

Department:

Information Technology Location:

Ames, IA (hybrid eligible)

FLSA Status:

Exempt Position Summary The Information Security Manager is responsible for supporting and strengthening the organization's information security program. This role helps protect patient, employee, and business information by managing security operations, identifying and reducing cyber risk, and ensuring compliance with regulatory requirements in a healthcare environment. The Information Security Manager works closely with IT teams, clinical leaders, and business partners to embed security into daily operations while supporting a culture of risk awareness and accountability. Essential Duties and Responsibilities Support day ‑ to ‑ day information security operations, including monitoring, incident response coordination, and follow ‑ up remediation. Assist with identifying, assessing, and managing information security risks across systems, applications, and vendors. Administer and support security technologies related to identity management, endpoint protection, logging and monitoring, and vulnerability management. Maintain and help evolve information security policies, standards, and procedures. Partner with IT and operational teams to ensure security considerations are incorporated into technology projects and system changes. Support security training and awareness initiatives for the workforce. Assist with audits, security assessments, and regulatory or compliance documentation requests. Track and report security issues, incidents, and remediation efforts to IT leadership. Maintain strict confidentiality and handle sensitive information appropriately. Perform related duties as assigned. Required Qualifications 3-5 years of experience in information security, cybersecurity, or a related IT role. Knowledge of core information security concepts such as access control, endpoint security, network security fundamentals, and incident response. Experience working in a regulated environment; healthcare experience preferred. Strong analytical, organizational, and problem-solving skills. Ability to communicate clearly with both technical and non ‑ technical stakeholders. Demonstrated ability to manage multiple priorities and work independently. Preferred Qualifications Experience supporting HIPAA-regulated environments. Familiarity with Microsoft-based security technologies (e.g., Entra ID, Defender, Sentinel). Exposure to third ‑ party risk management and vendor security reviews. Industry certifications such as Security+, SSCP, or CISSP (or progress toward certification). Education Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field, or equivalent combination of education and experience. Physical and Work Requirements Ability to work in a typical office environment. Ability to sit for extended periods and use standard office equipment. Pre-employment drug screen and criminal history background checks are a condition of hire. Benefits McFarland Clinic offers a comprehensive benefits package, including health and dental insurance, 401(k), and PTO. Click here for details. McFarland Clinic is central Iowa's largest physician-owned multi-specialty clinic. Join our team and join a group of caring professionals, dedicated to providing Extraordinary Care, Every Day! We value quality care and extraordinary service, trusting relationships and an exceptional workplace. Our organization has more than 75 years experience of caring for people. We welcome applicants who can help us enhance the health and well-being of our patients and communities we serve. McFarland Clinic is an Equal Opportunity Employer McFarland Clinic makes every effort to comply with all requirements of federal, state and local laws relating to Equal Employment Opportunity. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.