SVP - Cyber Security Ops Center & Assurance

Position Overview

Join our team if you're motivated and believe in the credit union philosophy of "People Helping People." This role oversees and drives the strategic direction for our Security Operations Center and ancillary services, including incident detection and response, vulnerability management, penetration testing, cyber threat intelligence, and offensive security initiatives.

Essential Responsibilities

• Strategic Leadership and Planning:

  • Develop and execute the overall strategy for security operations and assurance, aligning with organizational goals and industry best practices.
  • Lead roadmap development for SOC enhancements, vulnerability management programs, and red team/offensive security exercises.
  • Drive innovation in security operations through process optimization, threat hunting initiatives, and integration of AI/ML for predictive analytics.

• SOE Oversight:

  • Manage the Incident Detection and Response team to ensure effective 24/7 incident detection, triage, response, and recovery.
  • Implement advanced monitoring tools, threat intelligence integration, and automation to improve response times and accuracy.
  • Evaluate and manage relationships with security vendors, tools, and services.
  • Stay abreast of emerging technologies and threats to recommend investments in security capabilities.

• Vulnerability Management:

  • Oversee the identification, assessment, prioritization, and remediation of vulnerabilities across systems, applications, and networks.
  • Establish metrics and reporting to track program effectiveness and compliance.

• Penetration Testing and Offensive Security:

  • Direct internal and external penetration testing efforts, including ethical hacking simulations and red team operations.
  • Analyze findings to recommend defensive improvements and enhance overall resilience.

• Team Management and Development:

  • Build, mentor, and lead a cross-functional team of security analysts, engineers, and specialists.
  • Foster professional growth through training, performance evaluations, and career development opportunities.

• Vendor and Technology Management:

  • Evaluate and manage relationships with security vendors, tools, and services.
  • Stay abreast of emerging technologies and threats to recommend investments in security capabilities.

• Reporting and Communication:

  • Provide executive-level reporting on security metrics, incidents, and program status.
  • Communicate complex security concepts to non-technical stakeholders effectively.

Required Education & Experience

• Bachelor’s degree
• 8 years of experience in cybersecurity, with at least 2 years in a leadership role managing security operations or assurance teams.
• Minimum certifications: CISSP, CISM, GIAC (e.g., GSOM, GCIH, GPEN), or equivalent.
• Expertise leading and developing Security Operations Center services to include: SOC design and operational planning, SOC telemetry and analysis, attack detection, threat hunting and triage, cyber incident investigation and response.
• Expertise leading and developing Security Assurance services to include: penetration testing, cyber threat intelligence, vulnerability scanning and remediation, red/purple teaming.

Preferred Education & Experience

• B.A. in Information Security or Computer Science
• Preferred certifications: CISSP, GSOM
• 8 direct years of SOC leadership
• Knowledge of NICE and ECSF frameworks
• Experience managing hybrid SOC: internal with MSSP support

Job Environment & Physical Requirements

Hybrid work environment; 2 days on location in Raleigh, NC

Disclaimer

State Employees' Credit Union reserves the right to fill this role at a higher/lower level based on business need.