Information Security Manager

The Information Security Manager leads the organization’s day-to-day security operations and security administration functions. This role is responsible for managing Security Analysts, overseeing security monitoring and incident response activities, and ensuring operational security controls are executed effectively and consistently.This position partners closely with the Chief Information Security Officer (CISO), IT, infrastructure, cloud, risk, audit, and business stakeholders to maintain and strengthen the organization’s security posture.Essential FunctionsLead and manage Security Analysts responsible for security operations center (SOC) activities and security administrationOversee daily security monitoring, event triage, escalation handling, and incident response coordinationEstablish team priorities, assign work, and ensure timely completion of operational security tasks and remediation activitiesDevelop and report on security operations metrics, trends, and performance indicatorsOversee administration of security tools, including monitoring platforms, endpoint protection, vulnerability management, and access controlsManage user access administration, privileged access review support, and periodic access validation processesEnsure security controls are functioning effectively and that issues are tracked, escalated, and remediatedMaintain team procedures, runbooks, and documentation for security operations and incident responseSupport the implementation, tuning, and effectiveness of security tools and monitoring capabilitiesLead incident detection and response activities, including escalation to leadership when appropriateCoordinate with IT and system owners on containment, remediation, recovery, and lessons learnedMonitor emerging threats and vulnerabilities and direct team focus accordinglySupport audit readiness, assessments, and operational response exercisesManage, coach, and develop Security Analysts, including performance management and career developmentPromote consistency in investigation, documentation, escalation, and communication practicesPartner with the CISO on staffing, workload planning, and operational maturity initiativesCollaborate with Audit, Risk, Compliance, and IT teams on control validation and issue remediationSupport third-party reviews and audit follow-up activitiesEscalate material risks, control gaps, and resource concerns to the CISOEnsure alignment with organizational policies, standards, and regulatory requirementsRequired Education and ExperienceBachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field required, or equivalent work experience5 years of experience in information security, security operations, or a related technical discipline2 years of people leader experience requiredFinancial services or regulated industry experience preferredPrior experience leading or supervising technical or security teams preferredExperience in security operations, incident response, monitoring, access control, or vulnerability managementExperience supporting audits, control reviews, or compliance activities preferredRelevant certifications preferred (e.g., CISSP, CISM, Security+, GIAC)Strong knowledge of security operations processes, incident triage, escalation, and control administrationFamiliarity with security tools such as SIEM, endpoint protection, vulnerability management, firewalls, IAM, and ticketing systemsUnderstanding of identity and access management concepts, including privileged access and access reviewsWorking knowledge of enterprise environments (Windows, Linux, networking, cloud)Familiarity with frameworks such as NIST CSF and operational risk practicesStrong leadership, communication, and organizational skillsAbility to manage competing priorities and drive operational outcomesStrong analytical and problem-solving skillsAbility to communicate effectively with technical teams, leadership, auditors, and business stakeholdersStrong documentation skills and attention to detailPhysical DemandsWhile performing the duties of this job, the employee is frequently required to sit, stand, walk, visualize, talk, hear, and handle or touch objects or controls. The employee may occasionally lift, push, or pull up to 20 pounds.This position is an office-based position where you must be able to sit for long periods of time. The employee will be working on a computer 90% of the time. #J-18808-Ljbffr