Information Security Operations Manager

Alcority - New York, NY

Full-time - Mid Level

New York, NY

About the position

The Information Security Operations Manager will oversee and execute a comprehensive Information Security, Business Continuity, and Risk Management program within a cloud-first environment. This role involves managing security operations, incident response, vulnerability management, and compliance, while ensuring the security posture of the organization is maintained and improved. The manager will lead a team and collaborate with external SOC providers to enhance security measures and respond to security events effectively.

Responsibilities

• Leading the company's Security Operations team made up of in-house resources as well as an external SOC provider
• Optimizing detection and response capabilities with a focus on automation
• Participation in monitoring, validating, classifying, and responding to SOC escalated security events
• Performing regular assessments on detection and response controls to improve the security posture and prevent regression
• Driving maturity of the company's security operations procedures including the Incident Response framework
• Leading and maturing the organization's Threat Hunting Program
• Conducting forensics and root cause analysis on escalated or repeat security events as well as lead the build out of a DFIR team under Security Operations
• Execution of vendor, infrastructure, M&A, and other security reviews as necessary
• Execution of periodic user access reviews on critical systems and data
• Driving identification and reporting of vulnerabilities and associated remediation
• Collection and presentation of key Security Operations Metrics
• Accurately assesses performance of direct reports. Provide timely feedback and coaching to develop talent.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 7-10 years of experience in Security Operations roles, preferable managing a Security Operations Center
• Strong Microsoft 365 and Azure background
• Microsoft Sentinel experience
• Possession of or ability to obtain professional certifications in information security or risk management, such as a CISSP, CISM, CEH, or forensic certifications.
• Strong knowledge of security, regulatory, and control frameworks, such as ISO270001, HIPAA, GDPR, NIST, and CIS.
• Self-starter who demonstrates strong ownership of their domain and can benchmark the current state, propose improvements, and implement with little supervision
• Interpersonal and collaborative skills and the ability to communicate security and risk-related concepts to technical and nontechnical audiences.
• High level of personal integrity, and the ability to professionally handle confidential matters.
• Natural passion for security and strong drive to see both projects and investigations to completion
• Strong coaching and team building skills with the ability to motivate others through direct and indirect reporting relationships to achieve objectives.

Benefits

• 25 days of PTO for full-time employees
• 12 company holidays
• Life insurance
• Short-term disability
• Long-term disability
• Paid parental leave
• Employee Assistance Program
• Medical insurance in high deductible health plan
• Optional medical insurance in EPO plan
• Dental benefits
• Vision benefits
• Health Savings Accounts
• Flexible Spending Accounts
• Supplemental Life insurance
• 401(k) with discretionary company match of 50% up to the first 6% of contributions