Senior Manager, Cybersecurity Operations & Risk Management

Role Description

Reporting to the Senior Director, Cybersecurity & Compliance, the Senior Manager, Cybersecurity Operations & Risk Management is responsible for the operational oversight and continuous improvement of cybersecurity operations, incident response, vulnerability management, and technical risk reduction activities. This is a senior manager-level individual contributor role that leads initiatives through influence, coordination, and cross-functional partnership rather than direct people management.

The role partners with IT teams, business stakeholders, vendors, and managed service providers to strengthen security controls, reduce risk, and drive timely remediation of security issues. As the operational lead for key cybersecurity functions, this position helps ensure threats, vulnerabilities, and control weaknesses are effectively identified, prioritized, and addressed.

The ideal candidate combines strong technical expertise, operational leadership, and communication skills with a demonstrated ability to drive measurable security improvements across a global environment.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field
• Advanced degree preferred
• 7+ years of cybersecurity experience, with demonstrated success in security operations, incident response, vulnerability management, and technical risk reduction initiatives
• 3-5 years leading security operations, vulnerability management, or incident response functions
• Experience managing security incidents and coordinating cross-functional technical response activities
• Experience working with SIEM, EDR/XDR, vulnerability management, and cloud security platforms
• Experience prioritizing remediation efforts using business risk, exploitability, and threat intelligence
• Experience presenting cybersecurity risks, trends, and operational metrics to leadership
• Experience working with cybersecurity vendors, MSSPs, and technology partners

Requirements

• Lead cybersecurity monitoring, investigations, and incident response activities
• Serve as the operational lead and primary coordinator for cybersecurity incidents and investigations
• Coordinate containment, recovery, stakeholder communications, and post-incident remediation activities
• Develop and maintain incident response procedures, playbooks, and tabletop exercises
• Partner with internal teams, vendors, and managed security service providers to investigate and resolve security events
• Develop operational metrics and reporting related to threats, incidents, response effectiveness, and overall security posture
• Develop and maintain operational dashboards and reporting that provide leadership visibility into critical vulnerabilities, remediation status, technology lifecycle risks, security incidents, and unresolved risk exposures
• Own vulnerability identification, risk-based prioritization, remediation tracking, exception management, reporting and stakeholder engagement processes
• Maintain visibility into end-of-life (EOL) and end-of-support (EOS) technology risks
• Partner with technology teams to drive timely remediation of vulnerabilities and security weaknesses
• Develop vulnerability metrics and reporting to measure remediation performance, risk reduction, and program effectiveness
• Manage vulnerability exceptions and ensure risk acceptance decisions are documented and periodically reviewed
• Assess emerging threats and organizational exposure to inform remediation priorities
• Partner with Security Architecture to align remediation efforts with security standards and long-term risk reduction objectives
• Serve as the operational owner for cybersecurity technologies and services
• Continuously improve security monitoring, detection, response, and reporting capabilities
• Administer and continuously improve endpoint privilege management (EPM) controls
• Design and optimize operational workflows, dashboards, alerts, and automation opportunities
• Partner with Security Architecture and Infrastructure teams to implement and operationalize new security controls and technologies
• Manage cybersecurity vendor and service provider relationships
• Conduct technical security assessments to identify cybersecurity risks, control weaknesses, and remediation opportunities
• Partner with Infrastructure, Cloud, Applications, and Security Architecture teams to develop remediation plans
• Validate implementation and effectiveness of security controls
• Provide technical expertise and evidence in support of cybersecurity audits, assessments, and compliance activities
• Maintain remediation tracking, cybersecurity risk registers, technology lifecycle risk inventories, and operational security improvement plans
• Assist with third-party security assessments and technical due diligence reviews
• Serve as a trusted cybersecurity subject matter expert across operational security initiatives
• Build strong relationships with technology teams, business stakeholders, vendors, and service providers
• Drive accountability for remediation activities and security commitments
• Foster a culture of operational excellence, continuous improvement, and proactive risk management
• Communicate cybersecurity risks and recommendations to both technical and non-technical audiences
• Establish and lead recurring cybersecurity operational review meetings

Benefits

• Health Insurance
• Dental Insurance
• Vision Care
• Health Savings Account with Employer Contribution
• Flexible Spending Accounts
• 401(k) Retirement Plan with Employer Matching Contributions
• Short-Term Disability Insurance
• Life Insurance
• Vacation Time
• Sick Time
• Paid Parental Leave
• Adoption Assistance Program
• Charitable Matching Gifts Program
• Holidays and Cole Haan Discounts