Manager, Information Security

Your Role The Information Security Threat Detection and Response team uses advanced technologies like AI-driven threat detection and automated response platforms to monitor and respond to cybersecurity threats in real time. It acts as the hub for defense strategies, security tool integration, and rapid, data-driven decisions to protect the organization’s digital ecosystem. The Manager, Incident Response will report to the Senior Manager, Threat Detection & Response. In this role, as a forward-thinking leader, you will be responsible for evolving our Security Operations Center (SOC). This role is critical to our mission of safeguarding patient data, maintaining compliance, and ensuring the resilience of technology systems-through both traditional security operations and the strategic use of automation and AI-based security technologies. Our leadership model is about developing great leaders at all levels and creating opportunities for our people to grow - personally, professionally, and financially. We are looking for leaders that are energized by creative and critical thinking, building and sustaining high-performing teams, getting results the right way, and fostering continuous learning. Your Knowledge and Experience Bachelor's degree or equivalent experience At least 10-years prior relevant experience, including 4 years of management experience and at least 1 year of leading one or more critical cybersecurity functions Requires strong knowledge of security operations, incident response, SIEM platforms, and threat detection technologies Requires direct experience building and leading a high functioning 24x7 SOC operation, security incident management, and investigations & forensics function Familiarity with frameworks such as MITRE ATT&CK, NIST, HIPAA, and CIS Controls Requires exceptional communication skills with both technical teams and non-technical stakeholders Industry certifications such as CISSP, CISM, GIAC, or equivalent highly desired Strong understanding of Agile delivery models and backlog management Ability to manage multiple complex workstreams and successfully interact with all levels of management Experience with regulatory certifications such as HIPAA, SOC2, PCI-DSS and FedRAMP Understanding of advanced management approaches such as scheduling for internal & external resources, prioritizing across competing requests, budget management and oversight, coaching & mentoring direct reports, risk management, and delegation Excellent verbal / written communication, collaboration, analytical and presentation skills Experience with AI/ML concepts and tools desired Preferred experience working within the Healthcare industry Hybrid This role requires employees to be in - office based on our hybrid workplace model, balancing purposeful in - person collaboration with flexibility. For most teams, this means coming into the office two days each week. Employees living more than 50 miles from an office location will work with their manager to determine in-office time based on business need. #J-18808-Ljbffr Blue Shield of CA