VP, Threat Intelligence Operations and Automation Leader

Job Description:

Role Summary/ Purpose:  

The VP, Threat Intelligence Operations and Automation Leader is responsible for leading the strategy and operations of Cyber Intelligence, Threat Informed Defense, and Security Automation programs supporting Cyber Operations and Information Security. The Leader is responsible for strategy, operational oversight, and governance of all aspects of cyber threat intelligence-to include ensuring Synchrony’s cyber detection program is properly aligned and responsive to cyber threats- the design and deployment of detection content, and for security automation supporting the 24x7 Joint Security Operations Center (JSOC) and other Information Security automation requirements The ideal candidate will possess deep technical understanding of threat intelligence, cyber-fraud, cyber detection, security automation, and how to best service intelligence, detection, and automation requirements of a 24x7 security operations and incident response center. 

We’re proud to offer you choice and flexibility. At Synchrony, our way of working allows you to have the option to work from home, near one of our Hubs or come into one of our offices. Occasionally you may be required to commute to our nearest office for in person engagement activities such as business or team meetings, training and culture events.

Essential Responsibilities:

• Lead and set the long-term and day-to-day organizational strategies and operational rhythms for teams responsible for Digital Risk Intelligence (cyber-fraud intelligence), Technical Intelligence, Threat Informed Defense (cyber detection), and Security Automation.  

• Define and implement strategies and processes related to end-to-end detection and response activities and tradecraft that increase the organizations’ abilities; maintain strong oversight and governance of those processes and capabilities allowing for evaluation of risks.  

• Engage and partner with leaders internal to Information Security, Technology, Fraud, and across the business to identify intelligence, detection and security automation requirements. 

• Supervise and set standards for intelligence analysis and production across all delivery mediums. 

• Define and implement strategies and processes for identification, collection, and processing of prioritized intelligence from external and internal sources and maintain accountability for supplier-provided intelligence providers and tools.      

• Establish and maintain technical workflows to identify detection and automation requirements, to prioritize related work, and to deploy content and alerting, to include methods to validate and evaluate the accuracy and continued validity of underlying detection and automation code.  

• Utilize industry best practices and frameworks to adopt and/or create custom detection content and to catalog detection content in a prioritized fashion.