Cybersecurity Operations Manager

About the Role

We are seeking an experienced cybersecurity leader to oversee and enhance our security operations within a dynamic environment. As Cybersecurity Operations Manager, you will lead incident response, vulnerability management, operational improvements, and team development efforts to safeguard our organization and employees daily.

Key Responsibilities

• Oversee daily cybersecurity operations including monitoring, incident triage, investigating security events, vulnerability management, tracking remediation, and follow-up activities.
• Serve as main operational liaison for managed security service providers (MSSPs) and security vendors, handling escalations, performance evaluations, reporting, and ongoing improvements.
• Manage and mentor cybersecurity analysts, focusing on workload prioritization, performance reviews, career growth, and service quality.
• Develop team coverage strategies and cross-training programs to minimize dependency on individual staff members, while maintaining thorough documentation.
• Ensure thorough investigation, documentation, containment, remediation, and closure of security incidents.
• Maintain ownership of the incident response plan, escalation procedures, operational playbooks, and conduct regular incident response tabletop exercises.
• Make informed operational decisions within defined security policies, escalate significant risks or vendor issues as necessary.
• Prioritize operational tasks, mitigation efforts, and resource allocation based on risk assessment, business priorities, and service levels.
• Drive continuous improvements in incident response tactics, monitoring processes, procedures, and security control implementations.
• Support implementation, testing, and transition phases of cybersecurity initiatives requiring operational input.
• Contribute security expertise to IT and business technology changes and support cross-functional teams as needed.
• Collaborate with internal IT teams, vendors, and external partners to address security concerns, enforce remediation, and clarify responsibilities and deadlines.
• Use operational analytics and trends to identify opportunities for process enhancement and report on security metrics.
• Assist with security assurance activities including audits, compliance checks, and third-party evaluations as required.

Health and Safety Commitment

• Champion and model workplace safety, following organizational safety guidelines diligently.
• Proactively identify and address hazards, ensuring safe working conditions for team members and customers.
• Ensure all operational equipment is inspected and maintained for safe use.
• Train and oversee team compliance with safe work practices to prevent incidents.

Key Competencies and Skills

• Strong leadership abilities with aptitude to prioritize workloads, make sound decisions, and maintain team accountability.
• Adaptability to fast-paced environments with shifting priorities and unexpected challenges.
• Composure and focus during high-pressure incidents and escalations.
• Proactive ownership of issues, with practical problem-solving and resolution skills.
• Ability to coach and develop team members while upholding high standards of quality and documentation.
• Effective judgement when dealing with incomplete data or ambiguous responsibility, escalating appropriately.
• Clear communication of security risks, operational priorities, and decisions to technical staff, vendors, and leadership.

Qualifications and Experience

• Between 6 and 8 years of professional experience in cybersecurity, security operations, IT infrastructure, or related technical fields.
• At least 1 to 3 years of experience managing or mentoring cybersecurity analysts, technical teams, or security projects.
• Hands-on background in security monitoring, incident response, vulnerability management, and operations.
• Experience managing or working closely with MSSPs, including alert escalation, incident coordination, and service quality management.
• Strong familiarity with enterprise security technologies such as endpoint protection, identity and access management, network segmentation, vulnerability and email security, cloud security, and security service management platforms.
• Knowledge of security frameworks and compliance standards like PCI-DSS, NIST CSF, ISO 27001, or equivalent.
• Excellent communication, stakeholder engagement, and documentation capabilities.
• Maintained or contributed to incident response documentation, escalation procedures, operational playbooks, and tabletop exercises.

Preferred Qualifications

• Experience supporting third-party security assessments, vendor reviews, or remediation tracking.
• Familiarity with audit, compliance, or control validation procedures.
• Background in developing operational metrics, dashboards, KPIs, KRIs, or management reporting.
• Relevant security certifications such as CISSP, CISM, Security+, GCIH, GCIA, or equivalent.
• Knowledge of ITIL, PMP, Scrum, or formal project management methodologies.

Working Conditions

• Full-time, permanent position within a demanding operational environment with variable priorities and deadlines.
• Role may require involvement in incident escalations, vendor coordination, and urgent remediation deadlines.
• Frequent communication with internal teams, vendors, and external partners as part of the responsibilities.
• Availability for on-call rotations and escalation duties outside regular business hours is required.

Additional Information

We are committed to accessibility and provide accommodations for applicants with disabilities throughout the recruitment process upon request. Qualified applicants who can perform essential functions with reasonable accommodation are encouraged to apply and may contact the HR Coordinator for support.