Manager - Information and Cyber Security

Job Description

Security Tools Portfolio Management
•    Own end-to-end lifecycle of core security tools: DLP, Proxy, ZTNA, Next-Gen AV/EDR, and Email Security.
•    Drive tool evaluation, onboarding, configuration tuning, and performance measurement.
•    Ensure tools are operationally effective; not just deployed, but delivering measurable risk reduction.
•    Maintain tool health dashboards; present effectiveness metrics to CISO on a regular cadence.

2. Team Management & Mentoring
•    Lead, mentor, and grow a team of security operations engineers supporting tool management.
•    Build a culture of ownership; every team member knows their scope, drives closure, and escalates rarely.
•    Conduct regular one-on-ones, skill gap assessments, and structured development plans for each direct report.
•    Be the escalation backstop; the team resolves, you validate; escalation to CISO is the exception, not the rule.

3. Operations & Incident Response
•    Oversee tool-driven threat detection, alert management, and response workflows.
•    Define and maintain SOPs for each tool; ensure the team never improvises on critical decisions.
•    Drive root cause analysis on incidents and implement permanent fixes, not workarounds.
•    Manage change windows, patch cycles, and tool upgrade plans with zero unplanned downtime.

4. Cross-Department Collaboration
•    Work with IT, Network, Cloud, Talent Management, and Business teams to align security controls with operational realities.
•    Drive DLP policies with Talent Management for data classification and acceptable use alignment.
•    Collaborate with infrastructure teams for managing security operations.
•    Be the security engineering voice in project discussions; engaged early, not a last-minute reviewer.

5. Governance, Reporting & Continuous Improvement
•    Maintain accurate documentation: tool configurations, runbooks, vendor contracts, and SLA tracking.
•    Contribute to GRC processes; tool evidence for audits, compliance reports, and control assurance.
•    Track and report KPIs: alert-to-closure time, false positive rates, tool uptime, coverage gaps.
•    Proactively identify and recommend improvements before issues surface as incidents.

Mandatory Competencies