AVP, Cyber Security Operations*

*Relocation assistance provided
 

Job Summary

The AVP, Cyber Security Operations will be responsible for leading the design, implementation, and continuous enhancement of the organization’s security operations capabilities. This role will focus on developing a Security Operations Center (SOC) that ensures proactive monitoring, threat detection, and swift incident response to safeguard the organization’s critical infrastructure and digital assets. The individual will be tasked with establishing a robust threat intelligence program that integrates real-time threat data, analysis, and strategic insights to anticipate emerging risks and inform decision-making. A key aspect of this role is creating and nurturing operational processes that allow the SOC to function seamlessly across complex, hybrid environments, including cloud and on-premises systems.

This leader will be responsible for managing advanced security tools such as SIEM, SOAR, EDR, and threat intelligence platforms, and will leverage these tools to automate workflows, improve incident response times, and drive threat analysis. The role will ensure that security operations are continuously evolving to meet the latest threat landscapes, using an intelligence-driven approach to preemptively mitigate risks. The individual will be instrumental in driving the organization’s security incident management framework, ensuring effective resolution, reporting, and post-incident reviews that contribute to future risk mitigation.

Additionally, the position collaborates closely with business and IT leaders to ensure that security operations are aligned with organizational goals and risk management strategies. This role will also involve working with regulatory and compliance teams to ensure adherence to industry standards, data protection regulations, and cybersecurity best practices.

Expected Contributions

• SOC Leadership and Optimization: Leads the continuous improvement and optimization of the Security Operations Center (SOC) to ensure that it is capable of effectively detecting and responding to both external and internal threats. This includes refining SOC processes, tools, and workflows to ensure operational efficiency and responsiveness to security incidents across hybrid environments.
• Threat Intelligence Integration:  Develops and operationalizes a comprehensive threat intelligence program that enhances situational awareness and empowers the SOC with actionable insights. This includes integrating external threat intelligence feeds, leveraging internal threat data, and fostering collaboration with industry groups and threat-sharing communities to stay ahead of emerging threats.
• Incident Response Management: Oversees the development and execution of incident response plans, ensuring they are tested, documented, and continuously improved. Leads high-impact incident response efforts, coordinating with relevant stakeholders to contain, remediate, and recover from security incidents. Ensures post-incident reviews are conducted to identify gaps and improve the organization’s overall security posture.
• Security Automation and Orchestration: Spearheads the integration of automation and orchestration tools, such as Security Orchestration, Automation, and Response (SOAR) platforms, to streamline and accelerate security operations. Focuses on automating repetitive tasks, improving response times, and reducing manual effort to increase operational efficiency within the SOC.
• Security Metrics and Reporting: Establishes key performance indicators (KPIs) and metrics to measure the effectiveness of the security operations function. Provides regular updates and executive reporting on security operations performance, including threat detection, incident response timelines, and overall security posture. Uses data to drive improvements and ensure alignment with the organization’s risk management strategy.
• Cross-functional Collaboration: Works closely with technology, legal, compliance, privacy, and business leadership to ensure that security operations are aligned with overall business objectives and regulatory requirements. Facilitates the integration of security considerations into all aspects of the organization’s technology infrastructure and processes.
• Team Development and Mentorship: Fosters a high-performance culture within the security operations team through mentorship, training, and leadership. Supports career development and skills growth for team members, ensuring they are equipped with the latest knowledge and tools to handle evolving threats. Builds a culture of continuous learning to keep the team ahead of the curve in security operations and threat management.
• Risk and Compliance Alignment: Ensures that the