Head of Security Operations

About Us

Live Oak Bank is a digital bank that serves small business owners across the country.  Our groundbreaking spin on service and technology has fueled our mission to be America’s Small Business Bank. Our products help customers buy, build, and expand their business, and our high-yield savings and CD products help them grow their hard-earned money.  At Live Oak, we never lose sight of the well-being of our people. We believe our employees are the heart of our company. Our commitment to our customers and culture is intertwined, and we seek those who embody and embrace what it takes to empower the American dream.

How This Role impacts Live Oak and its People

The Head of Security Operations will lead the effort to safeguard the organization’s computer networks and systems. This person will plan and carry out security measures to prevent, detect and respond to infiltration and cyber-attacks against sensitive data and systems.

What You’ll Do at Live Oak

Under the leadership of the Chief Information Security Officer (CISO), the Head of Security Operations is tasked to protect information assets in support of business objectives and in conformity with policies. The Head of Security Operations will manage security and risk programs to identify, classify, remediate, monitor, and mitigate technical security risks and vulnerabilities throughout the company. Primary responsibilities include management of a Security Operations team, overseeing technology security measures throughout the organization, monitoring, processes, risk assessment programs, development and review of assessment reports and statistics and briefing of risk findings to company stakeholders. This includes management of controls associated with on-prem, and cloud infrastructure; detection and monitoring capabilities; incident response; threat intelligence; and security engineering/architecture activities as needed.

How You’ll Do It

• Develops, manages, and improves technology security risk-based programs to ensure the integrity, confidentiality, and availability of information assets
• Leads and directs the work of of the Security Operations team
• Leverage automation and AI to ensure efficiency, and reduce the need for manual work.
• Support information security risk assessment processes and works effectively with other groups in the enterprise in implementation of security measures and alignment to risk appetite.
• Develop and implement security policy, standards, guidelines, and procedures for the Security Operations program.
• Own and manage enterprise security monitoring and detection capabilities.
• Own and manage incident response plans, procedures and activities.
• Evaluates new security technology, trends, services, evolving threats, risks and vulnerabilities and provides recommendations to strengthen internal and external information security environment
• Coordinate definition, production, and continual improvement of metrics for the Security Operations program.
• Define and manage controls related to detection, incident response, vulnerability management and cloud security.
• Partner with peers to analyze and collect risk data and metrics from existing vulnerability, vendor management, security operations, threat management, and application related processes
• Provide leadership, training, and guidance to staff members
• Recommend security controls and/or corrective actions for mitigating technical and business risk
• Prepare financial forecasts and budgets for the Security Operations program.
• Participate in technology and security strategy planning processes to ensure identified risk mitigation is addressed in departmental planning
• Create and advocate for a culture of cyber security across the enterprise; drive behavioral and process changes for the business, especially in areas that correlate to observed operational issues.
• Serve as a key member of the information security leadership team.

Required and Preferred Experience

• Minimum of 8+ years in an advanced information security, information technology or related role with progressively increasing responsibility.
• 5+ years of cloud computing experience in AWS and/or Azure.
• Experience in developing Information Security policies and procedures, as well as successfully executing programs in a dynamic fast-paced environment
• Proven track record in leading Security teams.
• Experience leading incident response, security technology deployments, and vulnerability management programs in a cloud-first environment.
• Experience maintaining managed security services provider (MSSP) relationships for maximum operational effectiveness
• Working know