Manager - Information and Cyber Security

Job Description

Security Tools Portfolio Management
. Own end-to-end lifecycle of core security tools: DLP, Proxy, ZTNA, Next-Gen AV/EDR, and Email Security.
. Drive tool evaluation, onboarding, configuration tuning, and performance measurement.
. Ensure tools are operationally effective not just deployed, but delivering measurable risk reduction.
. Maintain tool health dashboards present effectiveness metrics to CISO on a regular cadence.

2. Team Management & Mentoring
. Lead, mentor, and grow a team of security operations engineers supporting tool management.
. Build a culture of ownership every team member knows their scope, drives closure, and escalates rarely.
. Conduct regular one-on-ones, skill gap assessments, and structured development plans for each direct report.
. Be the escalation backstop the team resolves, you validate escalation to CISO is the exception, not the rule.

3. Operations & Incident Response
. Oversee tool-driven threat detection, alert management, and response workflows.
. Define and maintain SOPs for each tool ensure the team never improvises on critical decisions.
. Drive root cause analysis on incidents and implement permanent fixes, not workarounds.
. Manage change windows, patch cycles, and tool upgrade plans with zero unplanned downtime.

4. Cross-Department Collaboration
. Work with IT, Network, Cloud, Talent Management, and Business teams to align security controls with operational realities.
. Drive DLP policies with Talent Management for data classification and acceptable use alignment.
. Collaborate with infrastructure teams for managing security operations.
. Be the security engineering voice in project discussions engaged early, not a last-minute reviewer.

5. Governance, Reporting & Continuous Improvement
. Maintain accurate documentation: tool configurations, runbooks, vendor contracts, and SLA tracking.
. Contribute to GRC processes tool evidence for audits, compliance reports, and control assurance.
. Track and report KPIs: alert-to-closure time, false positive rates, tool uptime, coverage gaps.
. Proactively identify and recommend improvements before issues surface as incidents.

Mandatory Competencies