Cybersecurity Incident Response Sr Manager

Job Description

The Senior Manager for Cybersecurity Operations and Incident Response will manage the deliverables and actions of our cybersecurity operations center (managed by a Managed Security Services Provider) and is responsible for driving enhancements in gaining visibility, detection and response of events, communicating, handling, documenting and recovering from, and most importantly learning from security incidents.

We're looking for someone with expertise in incident handling and thorough documentation, threat hunting, threat intelligence, system security monitoring and creating a feedback loop with our engineers to ensure we don’t have the same incident twice. This role is an Individual Contributor role to start and this person will provide leadership and direction on how to expand the team and capabilities.  This role can be a hands on technical role.

Job Responsibilities

• Cyber Incident Management: Lead the response to cyber incidents, including breaches, malware outbreaks, and other security events. Coordinate with the MSSP and internal stakeholders to ensure timely detection, analysis, containment, and eradication of threats.
• Strategic Oversight: Develop and implement strategies to enhance the efficiency and effectiveness of cyber operations and incident response processes for Aramark. Continuously evaluate and improve capabilities and procedures.
• Vendor Management: Serve as the primary point of contact for the MSSP, overseeing their performance, adherence to service level agreements (SLAs), and alignment with organizational security objectives. Provide guidance and direction to optimize the partnership and maximize value.
• Threat Intelligence: Stay abreast of emerging cyber threats, attack techniques, and industry trends. Leverage threat intelligence to inform decision-making, enhance proactive defense measures, and mitigate risks effectively.
• Cross-functional Collaboration: Collaborate closely with internal teams, including IT, legal, compliance, and business units, to ensure alignment of security initiatives with organizational goals and regulatory requirements. Communicate effectively with executive leadership on the status of cyber operations and incident response activities.
• Incident Response Planning: Develop and maintain comprehensive incident response plans, playbooks, and procedures. Conduct regular tabletop exercises and simulations to test the effectiveness of response strategies and identify areas for improvement.

Qualifications

• 8+ years of experience in cybersecurity, with a focus on incident response, security operations, and threat management.
• Proven experience managing Security Operations Centers (SOCs) and incident response teams.
• Strong knowledge of cybersecurity principles, frameworks, and best practices (e.g., NIST, ISO 27001, MITRE ATT&CK).
• Experience working with Managed Security Services Providers (MSSPs) and overseeing vendor relationships.
• Excellent leadership, communication, and interpersonal skills, with the ability to collaborate effectively across departments and influence stakeholders at all levels.
• Demonstrated experience in managing complex cyber incidents, including ransomware attacks, data breaches, and advanced persistent threats (APTs).
• Proven track record in developing and implementing incident response playbooks, procedures, and escalation paths to streamline response efforts and minimize impact.
• Strong technical proficiency in cybersecurity technologies and tools, including SIEM (Security Information and Event Manageme