Sr. Manager, IT Security Operations

Who is Swire Coca-Cola?We are a family-owned bottling company with a story spanning over two centuries. We are one of the largest bottlers of Coca-Cola in North America and distribute more than 50 beverage brands and flavors creating joy for our customers every day. Our 8,000+ driven employees work hard as part of a team that delivers refreshment to over 30 million consumers across 13 states. Begin a journey with us at Swire Coca-Cola and belong to a community of dedicated team members who think big and believe in winning together.

Why you'll love working at Swire Coca-Cola:

Swire Coca-Cola is committed to providing balance to support you in all aspects of your life, both at work and beyond. We offer the benefits you need for physical, financial, and emotional well-being.

• Health coverage (3 medical options, dental and vision). 401(k) Retirement Plan w/company match
• Health Savings Accounts w/company match
• FREE virtual primary care, acute care and physical therapy
• FREE Employee Assistance Program
• Company paid (vacation, holidays, sick time, bereavement, jury duty, maternity/parental, disability leave and volunteer time)
• Discounted & free product
• Tuition reimbursement
• Opportunities for career advancement

In addition to health benefits, Swire Coca-Cola is proud to offer you opportunities where you help give back directly to the communities and causes you care about. Note: Enrollment in a Swire Medical Plan is required for some benefits.

Job Details:
Job Level: 7

What does a Sr. Manager of IT Security Operations do at Swire Coca - Cola?
Swire Coca-Cola is seeking a Sr. Manager, IT Security - Operations to lead and mature the organization's security operations capabilities. This role is responsible for overseeing the detection, response, and remediation of cybersecurity threats while ensuring the stability and continuous improvement of core security services. The Sr. Manager will lead Security Operations, Incident Response, Vulnerability Management, Identity & Access Management and Monitoring functions, ensuring the organization can effectively identify and respond to evolving threats. This role partners closely with Security Architecture, GRC, IT Infrastructure, and business teams to ensure operational security controls are aligned with enterprise risk priorities. This position requires a strong leader with deep technical expertise, operational discipline, and the ability to translate complex security events into clear business impact for leadership. The ideal candidate will bring a balance of hands-on operational experience and strategic leadership to drive continuous improvement across the cybersecurity program.

Responsibilities

• Lead and oversee Security Operations (SOC) activities, including monitoring, detection, and alert triage
• Ensure effective operation of security tools such as SIEM, EDR, NDR, and related monitoring platforms
• Continuously improve detection capabilities through tuning, use case development, and threat intelligence integration
• Establish and maintain operational runbooks and standard operating procedures
• Lead incident response activities, including investigation, containment, eradication, and recovery
• Ensure incident response processes are well-defined, tested, and continuously improved
• Oversee root cause analysis and post-incident reviews to strengthen controls
• Coordinate with legal, communications, and leadership during high-impact incidents
• Lead the vulnerability management program, including scanning, prioritization, and remediation tracking
• Partner with IT and application teams to reduce exposure and improve patching effectiveness
• Lead the design and continuous improvement of IAM capabilities, including identity lifecycle management (Joiner/Mover/Leaver), authentication, and authorization aligned with least privilege principles
• Lead, mentor, and develop cybersecurity operations team members
• Oversee the implementation, integration, and optimization of security technologies
• Ensure security tools are configured, maintained, and delivering value
• Partner with Security Architecture on tool selection and roadmap planning
• Drive automation and efficiency within security operations workflows
• Track and report on vulnerability trends and remediation metrics
• Implement and manage access control models (RBAC/ABAC), MFA, conditional access, and privileged access management (PAM) to secure enterprise identities
• Oversee identity governance processes, including access reviews, certifications, role design, and segregation of duties (SoD) controls
• Partner with cross-functional teams to integrate IAM solutions, drive automation, and report on key metrics such as provisioning timelines, access risks, and compliance status
• Develop and deliver operational metrics, dashboards, and reporting for leadership
• Track KPIs such as detection time, response time, and remediation timelines
• Provide clear, actionable reporting on threats, incidents, and operational risk posture
• Drive continuous improvement initiatives across operational processes
• Establish risk-based prioritization aligned to business impact and threat intelligence
• Partner with GRC, Security Architecture, IT, and business stakeholders
• Support cross-functional incident response coordination and tabletop exercises
• Foster a culture of accountability, continuous learning, and operational excellence

Requirements

• Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, or related field required
• Certifications such as CISSP, CISM, or GIAC preferred
• 8+ years of cybersecurity experience, focused on operations, incident response, or threat management required
• 3+ years of leadership experience managing security teams or programs required
• Strong experience with SIEM, EDR, vulnerability management, and detection tools required
• Experience leading vulnerability management and remediation programs required
• Experience developing metrics, dashboards, and executive reporting required
• Deep understanding of incident response methodologies and frameworks
• Strong analytical and problem-solving skills
• Excellent communication skills translating technical issues into business impact

#LI-HH1

Come and join our Sparkling team!


Due to the nature of our work and to help maintain a safe workplace for our employees and customers, after a candidate receives a conditional offer of employment, they will be required to complete pre-employment screening. This includes a criminal background check, drug screening, and for certain roles, a motor vehicle record review.


Screening results are evaluated based on several factors, including the nature and severity of an offense, how much time has passed, the relevance to the position, patterns of repeated offenses, and driving history for roles that require operating a vehicle.


All results are reviewed fairly and in accordance with applicable state and federal laws, including the Fair Credit Reporting Act.


Swire Coca-Cola is an equal employment opportunity and affirmative action employer that participates in the E-Verify program as required by law. All qualified applicants will receive consideration for employment without regard race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status or other legally protected characteristics. Swire Coca-Cola does not sponsor applicants for work visas.