Mgr, Cyber Security Engineering & Ops

About the role

The Manager, Cyber Security Engineering and Operations leads the engineering, availability, resilience, and operational effectiveness of enterprise cybersecurity platforms and controls across internal, cloud, SaaS, application, data, and business-to-business environments. This role translates enterprise risk strategy into sustainable technical capabilities, directs complex security initiatives, influences cybersecurity architecture and investment priorities, and provides leadership during cybersecurity incidents and other events presenting material operational, financial, regulatory, or reputational risk.

Responsibilities

• Evaluate, deploy, integrate, lifecycle manage, resilience, and operational performance of enterprise cybersecurity technologies and services.
• Manage cybersecurity initiatives, balancing scope, resources, budgets, dependencies, risks, and delivery commitments to ensure successful outcomes.
• Direct cybersecurity engineering and operations activities during security incidents, including triage, containment, remediation, recovery, escalation, and post-incident improvements.
• Partner with cybersecurity architects and technology leaders to implement effective detection, prevention, and resilience capabilities across the enterprise.
• Evaluate emerging technologies, including AI, Generative AI, and agentic AI security controls, risks, and governance considerations.
• Collaborate with Audit, Compliance, Enterprise Risk Management, Legal, and business stakeholders to support examinations, sustain controls, address findings, and monitor remediation activities.
• Oversee cybersecurity operations, tools, vendors, managed security service providers, budgets, service roadmaps, and issue resolution efforts.
• Lead workforce planning, hiring, performance management, succession planning, mentoring, coaching, and development of a high-performing cybersecurity team.

Requirements

• Bachelor's degree in Information Security, Computer Science, Information Systems, Engineering, or related field; or equivalent combination of education and experience
• 10+ years of progressively responsible cybersecurity, information security, security engineering, technology risk, or security operations experience in complex enterprise environments
• 5+ years of leadership experience managing cybersecurity engineers, analysts, contractors, operational security teams, or cross-functional delivery teams
• CISSP, CISM, GIAC, CCSP, CISA, CRISC, Security+, Microsoft Azure Security Engineer Associate, AWS Security Specialty, or related certification preferred
• Demonstrated experience implementing, operating, and supporting enterprise cybersecurity technologies and day-to-day security operations
• Experience supporting audits, regulatory examinations, compliance reviews, and remediation activities in highly regulated financial services environments preferred
• Strong knowledge of banking systems, operational resilience, and cybersecurity risk management
• Familiarity with regulatory and compliance requirements including OCC, FDIC, Federal Reserve, SEC, FINRA, GLBA, FFIEC, SOX, PCI DSS, and applicable regulatory notification obligations
• Working knowledge of the NIST Cybersecurity Framework, NIST SP 800-series guidance, CIS Controls, and FFIEC cybersecurity domains
• Expertise leading complex cross-functional projects, managing stakeholders, and delivering large-scale cybersecurity initiatives

Skills & Knowledge

• Expert knowledge of security architecture principles, engineering standards, governance models, and operational security practices
• Expertise across network, endpoint, identity, application, data, cloud, and hybrid security technologies
• Hands-on knowledge of firewalls, web application firewalls, IDS/IPS, secure web gateways, EDR/XDR, SIEM, SOAR, PAM, MFA, IGA, encryption, vulnerability management, threat monitoring, incident response, and operational recovery
• Experience securing Azure, AWS, SaaS, and hybrid-cloud environments, including cloud security posture management and cloud-native security controls
• Understanding of AI, Generative AI, and agentic AI risks, governance, machine identities, non-human identities, and secure AI implementation practices
• Expertise in risk-based vulnerability and exposure management, including prioritization, remediation governance, exception management, and validation of risk reduction
• Strong analytical, critical-thinking, and systems-thinking capabilities with the ability to assess complex technical, operational, regulatory, and business challenges
• Executive-level verbal and written communication skills with the ability to communicate complex cybersecurity concepts to technical and non-technical audiences
• Proven ability to build, lead, and develop high-performing teams while driving accountability, performance, and results