Manager, IT Risk & Security Operations

Core Competencies

Function

Key Responsibilities

• Team Leadership & Operations Management
• Directly manage, coach, and develop the security team, including goal-setting, performance reviews, skills development, and a culture of accountability, collaboration, and continuous improvement.
• Own day-to-day scheduling, workload balancing, coverage, and priorities for the security operations function, translating broader security strategy into actionable team objectives.
• Provide regular reporting on team performance, operational metrics, emerging risks, and areas requiring leadership attention.
• Partner with Software Engineering, Product, Infrastructure, and Service Desk leadership to embed security requirements, secure design principles, risk-based decision-making, and governance throughout the technology lifecycle.
• Security Operations & Incident Response
• Lead daily security monitoring, alert triage, threat detection, and investigation across SIEM, SOAR, EDR/XDR, email security, and related platforms.
• Act as the primary operational escalation point for security incidents and coordinate containment, recovery, communications, and post-incident follow-up.
• Maintain and continuously improve incident response playbooks, runbooks, standard operating procedures, and escalation processes.
• Coordinate tabletop exercises and support disaster recovery and ransomware-preparedness testing.
• Drive detection engineering and SOC automation to improve coverage, consistency, and response efficiency.
• Security Technology & Automation
• Lead the evaluation, implementation, lifecycle management, renewals, upgrades, and day-to-day vendor relationships for security operations technologies, including SIEM, SOAR, EDR/XDR, vulnerability management, and email/endpoint security platforms.
• Drive adoption of security automation to reduce manual effort in monitoring, triage, investigation, and remediation workflows.
• Support larger strategic security initiatives and technology decisions requiring enterprise budget or executive approval.
• Vulnerability Management & Security Testing
• Run the day-to-day vulnerability management program, including scanning cadence, triage, risk-based prioritization, remediation tracking, dashboards, and reporting across infrastructure, endpoints, cloud, applications, and network devices.
• Coordinate remediation timelines and priorities with Infrastructure, Software Engineering, Service Desk, and other stakeholders.
• Coordinate internal and third-party penetration testing and security assessments across applications, infrastructure, networks, and cloud environments, and track findings through remediation and validation.
• Infrastructure, Network, Cloud & Identity Security
• Implement and maintain security standards and configuration baselines across on-premises infrastructure, endpoints, networks, cloud platforms, and Microsoft 365.
• Oversee the operational security of IAM, PAM, MFA, Microsoft Entra ID, Active Directory, and other identity security controls.
• Monitor and maintain security controls covering firewalls, network segmentation, secure remote access, endpoint protection, network detection, and cloud security posture.
• Coordinate vulnerability remediation, security hardening, patching priorities, and control improvements with Infrastructure and Service Desk teams.
• Partner with Infrastructure and Cloud teams to embed security requirements into technology changes, deployments, and day-to-day operations.
• Risk, Governance & Compliance
• Maintain the operational cyber risk register, support risk assessments, and escalate significant risk to leadership.
• Support internal and external audits and compliance assessments by coordinating evidence, stakeholders, and remediation actions.
• Coordinate third-party security assessment intake, tracking, and follow-up.
• Help maintain adherence to security policies and standards aligned with NIST CSF, ISO 27001, CIS Controls, and OWASP.
• Application Security
• Serve as the operational liaison between IT Security and Software Engineering on application risk, translating material application risks into the enterprise risk process.
• Coordinate application penetration testing and security audits, including scoping input, scheduling, evidence gathering, and tracking findings and recommendations through closure.
• Review SAST, DAST, and SCA results from Software Engineering processes, help prioritize remediation from a risk perspective, and escalate material control gaps to IT and Software Engineering leadership.
• Work with Product and Software Engineering teams to implement security requirements identified through architecture, design, project, and change-management reviews.
• Security Awareness
• Support security awareness, phishing simulation, and employee education initiatives, working with relevant teams to reinforce secure practices and address recurring risk themes.
• Skills & Qualifications
• Degree or diploma in Information Technology, Cybersecurity, Computer Science, or a related discipline, or an equivalent combination of education and experience.
• Minimum 8 years of progressive experience in cybersecurity, security operations, or a related technical security discipline.
• Minimum 3 years of experience managing or supervising a cybersecurity or technical team, including coaching, performance management, and employee development.
• Hands-on experience with security monitoring, incident response, vulnerability management, and security operations technologies such as SIEM, SOAR, EDR/XDR, IAM/PAM, firewalls, and cloud security tools.
• Experience evaluating, implementing, and managing security technologies throughout their lifecycle and using automation to improve security operations.
• Experience partnering with security technologies and platforms such as Microsoft Sentinel, Microsoft Defender, Microsoft Entra ID, Azure, and AWS is an asset.
• Experience partnering with Software Engineering, Infrastructure, Cloud, and Service Desk teams to implement and operationalize security controls.
• Working knowledge of application security concepts, including SAST, DAST, SCA, and secure software development lifecycle principles, with the ability to assess risk and coordinate effectively with Software Engineering teams.
• Familiarity with security frameworks and practices, including CIS Controls, NIST CSF, ISO 27001, and OWASP.
• Strong communication, leadership, and operational judgment, with the ability to coach team members, work across technical and business teams, and escalate material risks appropriately.
• A relevant security certification, such as Security+, CySA+, GIAC, CISSP, CISM, or CCSP, is a strong asset.

What Success Looks Like

About the Team

Company Culture