Security Operations Manager

The Security Operations Manager is a strategic leader responsible for managing the Security Operations team and ensuring its alignment with organizational objectives. The role encompasses oversight of policies and procedures, performance tracking, and collaboration with cross-departmental leaders to ensure effective incident response and proactive security measures.

Responsibilities:

• Team Leadership: Lead and direct the Security Operations team, providing guidance and oversight to ensure optimal performance.
• Policy Administration: Administer and improve established processes for handling security alerts, incident response, and vulnerability management.
• Strategic Planning: Contribute to departmental budgeting, strategic planning, and procedural changes to enhance security operations.
• Technology Leadership: Work with the team or other departments to reduce the chance of incidents happening.
• Delegation, transfer of tasks: Ensure management of the frequent incident types are delegated to the NOC / 24/7 incident management teams. This includes training and automating work for those teams.
• Championing AI: Following developments in AI models and tools and training the team to deploy them to speed up investigations and reduce work.
• Incident Management: Oversee the management of security incidents, escalating and coordinating with senior leadership and other departments as needed.
• Vulnerability Management: Ensure timely resolution of vulnerabilities, managing the lifecycle from identification to deployment.
• Playbook Oversight: Oversee the creation, maintenance, and improvement of security playbooks, ensuring they align with organizational goals.
• Cross-Departmental Collaboration: Partner with leaders across departments, serving as a trusted resource and aligning security operations with broader organizational strategies.
• Performance Tracking: Set performance targets and goals for the team, track progress, and report on key metrics to senior leadership.
• Data Analysis: Analyze and interpret operational data to identify trends and patterns, providing actionable recommendations for continuous improvement.

Required Qualifications

• Comprehensive knowledge of security operations, including incident response, vulnerability management, and proactive risk mitigation.
• Demonstrated business acumen and familiarity with emerging cybersecurity trends.
• Understanding key technologies for cloud based web applications and architectures
• Continuous learning and testing of AI technologies