Cybersecurity Success Manager

Job Title: Cybersecurity Success Manager

Department: TPRM— Managed Services

Reports To: Senior Director of Security Advisors

Employment Status: Full Time

FLSA Status: Exempt

Effective Date: 9/21/2026

About Us

Meditology Services is a leading healthcare-focused cybersecurity, privacy, compliance, and information risk management consulting firm. We help healthcare organizations manage risk, strengthen security programs, achieve compliance objectives, and improve cybersecurity maturity through practical, business-focused advisory services.

Through CORL Technologies, we deliver third-party risk management as a managed service. Our clients hand us their vendor assessment workload, and we run it — vendor outreach, questionnaire and evidence evaluation, risk reporting, escalation, and remediation follow-up — supported by a proprietary vendor data asset, the CORL portal, and the CORL Cleared Vendor Directory.

Our teams work alongside healthcare security leaders, procurement organizations, business owners, and the vendors themselves to reduce third-party risk in ways clients can see and measure.

Why Meditology

At Meditology, Success Managers are more than coordinators, they own the outcome of a client's managed third-party risk program. You'll work directly with security teams and CISOs, drive real reduction in vendor risk across large healthcare vendor ecosystems, and have visible influence over how the service is delivered.

You'll also see the strategic side of the discipline. Cybersecurity Success Managers work closely with our Professional Services consultants, who design and mature client TPRM programs, and are often the first to recognize when a client needs that help.

If you're looking for a role that combines cybersecurity expertise, program ownership, executive relationship management, and a genuine bias toward driving work forward, we'd love to hear from you.

Position Description

Meditology is seeking a Cybersecurity Success Manager to join our Managed Services team. This role owns the delivery and outcomes of managed third-party risk programs for an assigned portfolio of healthcare clients.

Executing assessments is only part of the job. The value clients experience comes from a steady flow of vendors into the program, consistent risk tiering, persistent vendor escalation, disciplined remediation follow-up, and reporting that demonstrates risk reduction.

The position is deliberately proactive. Rather than waiting for a client to initiate an assessment and shepherding it through the workflow, the Cybersecurity Success Manager builds and drives the vendor pipeline, anticipates renewal and reassessment cycles, and ensures clients consume and benefit from the full service they purchased.

This role is dedicated to Managed Services delivery. It does not deliver Professional Services engagements, but works closely with those consultants and is expected to recognize when a client's underlying program gaps warrant bringing them in.

Responsibilities

Own Client Relationships and Program Outcomes

Serve as the primary relationship owner and delivery lead for a portfolio of managed service clients.

• Serving as the day-to-day point of contact for client stakeholders, from analysts to CISOs

• Owning overall program outcomes rather than the throughput of individual assessments

• Running recurring working sessions and quarterly business reviews

• Building trusted relationships across security, procurement, legal, and business stakeholders

• Aligning service delivery to each client's operating model, tools, and existing workflows

• Coordinating Security Advisors, analysts, and offshore research teams assigned to the account

• Maintaining accurate account documentation, tracking, and status reporting

Lead Client Onboarding and Service Integration

Own onboarding from contract signature forward, partnering with Sales and Security Advisors.

• Leading onboarding for new clients, new users, renewals, and expanded service tiers

• Documenting the client's current security assessment, procurement, GRC, and reporting workflows so our delivery fits inside them

• Establishing assessment goals up front: volume, type (Validated, Validated & Remediated, or Reliant), and timeframe

• Defining which vendor populations route through our team versus the client's internal team (as applicable)

• Identifying existing client questionnaires and scoping custom questionnaire development where warranted

• Setting expectations on vendor outreach windows, vendor responsiveness, and security certifications accepted in lieu of questionnaires

• Securing review and approval of client-branded vendor communications issued from the CORL platform

• Training client stakeholders on our processes, the client portal, and reporting outputs

Drive Proactive Assessment Execution

Build and drive the vendor assessment pipeline rather than waiting for clients to initiate work.

• Forecasting assessment demand from contract renewals, new procurement activity, and reassessment cadence

• Sourcing upcoming vendors from client stakeholders and maintaining a queue sufficient to meet contracted volumes

• Tracking utilization against purchased assessment counts and addressing shortfalls early

• Advancing assessments through intake, outreach, evaluation, and reporting within published SLAs

• Monitoring assessment status daily and intervening before delays become schedule risk

• Applying the appropriate assessment type and depth based on vendor risk tier and client requirements

• Escalating internally when capacity, quality, or timeline risks emerge

Manage Vendor Engagement and Escalation

Drive vendor cooperation without the leverage of a direct contract.

• Owning outreach to vendor security, compliance, and executive contacts

• Pursuing unresponsive vendors persistently and through multiple channels

• Leveraging our position across many healthcare clients to encourage vendor participation

• Maintaining accurate records of vendor communications, commitments, and outcomes

Advise on Vendor Risk Decisions and Remediation

Help clients decide what to do about the risk the program surfaces.

• Presenting assessment findings and translating vendor-level issues into business impact

• Recommending risk strategy options based on vendor criticality, data access, and client risk tolerance

• Advising on remediation priorities, timelines, and acceptable risk acceptance decisions

• Applying vendor tiering consistently to determine assessment depth and reassessment cadence

• Recognizing where program-level gaps limit the value of managed assessments, and engaging Professional Services colleagues accordingly

Reporting, Presentation, and Facilitation

Communicate vendor risk, progress, and business impact through clear reporting and confident facilitation.

• Producing vendor risk portfolio and program status reporting

• Leading recurring client working sessions and quarterly business reviews

• Presenting program results, metrics, and recommendations to leadership teams

• Supporting executive and board-level presentations

Support Account Health, Retention, and Growth

Protect and grow an assigned portfolio in partnership with Sales.

• Maintaining a clear view of client health, sentiment, and renewal risk

• Identifying and referring opportunities for additional assessment volume, expanded service tiers, and RITHM subscription components

• Identifying and referring Professional Services opportunities where clients need program design or maturity work

• Partnering with Sales ahead of renewal on timing, budget cycles, and approval paths

• Capturing client feedback and driving corrective action when satisfaction declines