Manager, Information Security (Hybrid)

The Manager, Information Security, leads the organization’s information security operations and is responsible for protecting enterprise systems, data, and technology platforms from evolving cybersecurity threats. This role provides strategic and hands-on leadership for the Security Operations Center (SOC), including threat detection, incident response, vulnerability management, security technologies, and team development.

• →Lead the Security Operations Center (SOC) and execute the organization’s security operations strategy and roadmap.
• →Direct cybersecurity incident response and breach investigations, including detection, containment, recovery, and reporting.
• →Oversee security monitoring, threat detection, threat intelligence, vulnerability management, and threat-hunting activities.
• →Lead the implementation and optimization of enterprise security technologies, including SIEM, EDR/XDR, IAM/PAM, IDS/IPS, cloud security, and vulnerability-management platforms.
• →Partner with Infrastructure, Cloud, Development, Legal, Procurement, and business teams to integrate security requirements into technology solutions and business processes.
• →Manage security vendors, technology partners, audits, and operational security services.
• →Develop and report cybersecurity metrics, KPIs, security trends, and program effectiveness to leadership.
• →Lead, mentor, and develop security professionals while providing technical guidance and escalation leadership for significant security incidents.

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, or equivalent relevant experience.
• 7+ years of progressive cybersecurity or information security experience, including significant experience in Security Operations, Security Engineering, or incident response.
• Demonstrated experience leading security professionals or technical cybersecurity teams.
• Hands-on experience with SIEM/SOAR platforms such as Rapid7, CrowdStrike, or comparable technologies.
• Working knowledge of EDR/XDR, IAM/PAM, vulnerability management, cloud security, WebApp firewalls, IDS/IPS, DLP, and related enterprise security technologies.
• Knowledge of cybersecurity frameworks and standards such as NIST CSF, , ISO 27001, and CIS 18 Controls.
• CISSP, CISM, GCIH, CEH, AWS Security, Microsoft Security, or comparable certification preferred.