Sr. Director, Security Operations Lead

Position Summary:

The Sr. Director Security Operations Lead works under the direction of the CISCO, will manage and lead a team responsible for monitoring, detecting, investigating, and responding to security incidents, ensuring the protection of company assets and information. This role involves developing and implementing security policies, procedures, and protocols, as well as overseeing the day-to-day operations of the security function. The Lead also plays a crucial role in stakeholder engagement, incident management, and ensuring compliance with security standards.

Primary Responsibilities and Accountabilities:

• Team Leadership: Provide guidance, mentorship, and performance management to a team of security professionals.
• Incident Response: Oversee the investigation and resolution of security incidents, ensuring timely and effective responses.
• Security Operations Management: Ensure the efficient and effective operation of security systems, including monitoring, detection, and response.
• Policy and Procedure Development: Develop and implement security policies, procedures, and standards to safeguard company assets and information.
• Risk Management: Identify and assess security risks, developing mitigation strategies and ensuring compliance with security requirements.
• Stakeholder Engagement: Collaborate with internal and external stakeholders to ensure effective communication and coordination on security matters.
• Security Awareness and Training: Promote security awareness among employees and provide training on security best practices.
• Performance Monitoring and Reporting: Track and report on key performance indicators (KPIs) related to security operations and incident management.
• Vulnerability Management: Identify and address vulnerabilities in systems and applications to prevent security breaches.
• Security Technology Management: Oversee the implementation, maintenance, and optimization of security technologies.
• Compliance: Ensure compliance with relevant security regulations and standard

Competency Requirements:

• Strong leadership and team management skills.
• Excellent communication and interpersonal abilities.
• Knowledge of security systems and technologies.
• Ability to assess risks and develop mitigation strategies.
• Experience with incident response and crisis management.
• Familiarity with relevant laws and regulations.
• Strong analytical and problem-solving skills.
• Ability to work under pressure and make quick decisions.

Communication:

• Verbal and written skills needed to communicate effectively with customer and IT project teams and to provide direct manager with detailed information.
• Delivers engaging, informative, well-organized presentations.
• Communicates difficult/sensitive information with tact and objectives.

General Location Requirements:

• Comply with all sgsco standards, applicable regulations and departmental Standard Operating Procedures.
• Comply with sgsco EH&S policies and procedures to maintain a safe work environment.
• Keep department organized and clean.
• Attend company-wide and departmental meetings.
• Assist in any additional responsibilities, as directed by management. This job description is not intended to be all-inclusive. You may be required to perform other reasonably related business duties as assigned by your manager or other management personnel.

Educational & Experience Requirements:

• Bachelor's or master's degree in computer science or information systems
• More than eight years of professional experience in information security analyzing and applying information security, risk management, and privacy practices.
• Knowledge of national and international regulatory compliances and frameworks such as ISO,NIST, SOX, BASEL II, EU DPD, HIPAA, and PCI DSS

Supplementary Information:

This description is based upon management's assessment of the requirements and functions of the job as of the date this description was prepared or revised. It is a general guideline for managers and colleagues. It is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities required of the incumbent. Management reserves the right on a temporary or indefinite basis to modify as necessary to meet changing business conditions.

Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

This is a remote position in the US. We are open to candidates in various states, with the exception of those residing in the following: AK, DC, ME, NH, NM, OK, HI, MS, MT, NV, NE, ND, SD, VT, WY, WV

Our compensation reflects the cost of labor across several U.S. geographic markets, and we pay differently based on those defined markets. The U.S. pay range for this position is $160,000 - $180,000 USD annually. Ultimately, in determining pay, we will consider the successful candidate's location, experience, and other job-related factors.

Group benefits currently include a selection of health care plans with prescription drug coverage, dental plan, vision plan, basic and supplemental life insurance, a flexible spending account for medical and dependent care expenses or a health savings account based on plan selection, short/long term disability and 401(k) Savings Plan.

Masters (preferred)
Bachelors (required)

Knowledge of national and international regulatory compliances and frameworks such as ISO,NIST, SOX, BASEL II, EU DPD, HIPAA, and PCI DSS (required)
8 years: Years of professional experience in information security analyzing and applying information security, risk management, and privacy practices. (required)