Cybersecurity Operations Manager

Description

Are you a cybersecurity leader who thrives in a fast-paced environment and enjoys solving complex security challenges? Join us as a Manager, Cybersecurity Operations and lead security operations, incident response, and continuous improvement initiatives that help protect our business and Team Members every day.

Position: Cybersecurity Operations Manager

Job Overview:

This role provides operational leadership across cybersecurity monitoring, incident triage, investigation coordination, vulnerability management, remediation tracking, vendor coordination, security reporting, and operational follow-up. The role manages cybersecurity analysts, supports team coverage and cross-training, and works with IT teams, vendors, and external partners to resolve security issues and drive remediation actions.

The role is also accountable for ensuring incidents are investigated, documented, contained, remediated, and followed through to closure, while maintaining ownership of the incident response plan, escalation paths, operational playbooks, and regular incident response tabletop exercises.

Accountabilities:

• Lead day-to-day cybersecurity operations, including security monitoring, incident triage, investigation coordination, vulnerability management, remediation tracking, and operational follow-up.
• Act as the primary internal operational contact for managed security service providers and security vendors, including escalation review, service quality, reporting, and improvement follow-up.
• Manage, coach, and develop cybersecurity analysts, including work prioritization, performance management, career development, and quality of delivery.
• Build appropriate team coverage, cross-training, and documentation to reduce dependency on individual team members.
• Ensure security incidents are appropriately investigated, documented, contained, remediated, and followed through to closure.
• Own and maintain the incident response plan, escalation paths, operational playbooks, and regular incident response tabletop exercises.
• Make day-to-day operational decisions within established security processes and escalate material risks, exceptions, vendor concerns, or issues requiring leadership direction.
• Prioritize operational activities, remediation efforts, and team capacity based on risk, business impact, service requirements, and available resources.
• Drive continuous improvement of incident response processes, operational procedures, monitoring practices, and security controls.
• Support cybersecurity initiatives where operational input, testing, implementation support, or transition into ongoing support is required.
• Provide security input into relevant technology and operational changes, and support other areas of IT and the business based on operational demand.
• Work with IT teams, vendors, and external partners to resolve security issues, drive remediation actions, and clarify ownership and timelines.
• Use operational metrics and trends to identify improvement opportunities and report on security performance.
• Support security assurance, audit, compliance, and third-party security assessment activities as needed.

Health and Safety:

• Promotes and endorses Safety Vision "Safety is our way of life".
• Observes and support Longo's Safe Work guidelines and other safe work practices.
• Role models the importance of health and safety by always working safely, and calls out and addressed and safety issues.
• Recognizes risks which may pose a danger to Team Members and customers and resolves such issues (where possible) or modifies work, mitigating the risk to Team Member/customer until resolution can be sourced and implemented (i.e. Longo's Call Center Harassment/Violence Reference Guide)
• Ensures all pre-use checks (where applicable) are conducted and all equipment is maintained to provide for safe operation by Team Members.
• Ensures that TMs are trained to safely carry out their work in the department, and ensures that all work is safely carried out by Team Members.

Key area of responsibility:

• Partner with IT, Infrastructure, Application Support, Service Desk, vendors, and external partners to address cybersecurity issues and remediation activities.
• Provide security input into technology changes and operational initiatives.
• Support audit, compliance, security assurance, and third-party security assessment activities.
• Escalate material risks, operational issues, exceptions, vendor concerns, or decisions requiring leadership direction, and act as a point of escalation for urgent cybersecurity issues outside regular business hours when required.

Key Competencies:

• Strong operational leadership, with the ability to prioritize effectively, make sound decisions, and maintain accountability across the team.
• Comfortable working in a hands-on, fast-paced environment with shifting priorities, unexpected issues, and competing deadlines.
• Calm, structured, and solution-focused during incidents, escalations, and high-pressure situations.
• Able to take ownership, make practical recommendations, and drive issues through to resolution.
• Effective at coaching team members while maintaining high standards for quality, documentation, and follow-through.
• Able to operate effectively with incomplete information or unclear ownership, using sound judgement and escalating when leadership direction is required.
• Able to communicate security risks, operational priorities, progress, and decisions clearly to technical teams, vendors, and leadership.

Knowledge, Skills & Credentials:

Required

• 6 to 8 years of experience in cybersecurity, security operations, IT infrastructure, or a related technical field.
• 1 to 3 years of experience leading, mentoring, or managing cybersecurity analysts, technical teams, or security workstreams.
• Experience with security monitoring, incident triage, incident response, vulnerability management, or security operations.
• Experience overseeing or working within an MSSP-supported security operations model, including alert escalation, incident coordination, and service performance management.
• Experience working with managed security service providers, security vendors, or external security partners.
• Familiarity with enterprise security technologies across endpoint security, identity and access management, network segmentation, vulnerability management, email security, network security, cloud security, or security service management.
• Working knowledge of security frameworks or compliance requirements such as PCI-DSS, NIST CSF, ISO 27001, or similar.
• Strong communication, stakeholder management, reporting, and documentation skills.
• Experience maintaining or supporting incident response plans, escalation procedures, playbooks, and tabletop exercises.

Preferred / Asset

• Experience supporting third-party security assessments, vendor security reviews, or remediation tracking.
• Experience supporting audit, compliance, control validation, or remediation activities.
• Experience developing operational metrics, dashboards, KPIs, KRIs, or management reporting.
• Security certifications such as CISSP, CISM, Security+, GCIH, GCIA, or equivalent.
• ITIL, PMP, Scrum, or formal project management experience.

Working Conditions:

• Full-time, permanent role.
• Fast-paced operational environment with shifting priorities, unexpected issues, and competing deadlines.
• Role may require participation in incident response, escalations, vendor coordination, and time-sensitive remediation activities.
• Requires regular communication with technical teams, vendors, external partners, and leadership.
• Requires availability to participate in an on-call or escalation rotation and act as a point of escalation for urgent cybersecurity issues outside regular business hours when required.

We may use Artificial Intelligence (AI) tools to support efficiencies in the candidate screening, assessment, and recruitment processes. These AI tools do not make hiring decisions on behalf of the Company. Hiring decisions are made by our Hiring Teams.