Head of Security & Network Operations

PDI Technologies•Alpharetta, GA

26d

About The Position

PDI Technologies is hiring a senior leader to run its Security Operations Center (SOC) and Network Operations Center (NOC) as one customer-facing operation. The role leads more than 150 people across onshore and offshore teams, delivering 24/7 security monitoring, incident response, and network uptime for more than 12,000 customers. The position leads the SOC, NOC, and Threat Intelligence & Detection functions through about five direct reports and reports to the SVP & GM. The role owns service delivery, operating model design, budget, headcount, tooling and vendor spend, delivery economics, and plans for scaling operations. It sets integrated processes, escalation paths, coverage, and playbooks across security and network operations; leads high-severity incidents and customer and executive communications; and drives root-cause remediation. The leader will also set a multi-year roadmap for security and network operations tooling, advance automation and AI-assisted operations, act as executive sponsor for key customers, and partner with Product, Sales, Operations, and Customer Success on offerings and customer needs. Success includes assessing the organization, tools, service levels, and cost structure in the first 90 days; putting a unified operating model, major-incident process, and shared KPI/SLA dashboard in place by six months; and delivering measurable improvements in uptime, response times, cost to serve, and automation by 12 months. International travel is required to lead global teams.

Requirements

12 or more years of experience in security operations, network operations, or infrastructure operations.
At least 7 years of leadership experience, including experience leading leaders or managers of managers.
A track record of running a 24/7 operation of 100 or more people, ideally across onshore and offshore teams.
Deep experience running a SOC or NOC and solid working knowledge of the other.
Experience owning an operating budget and improving cost to serve or margin.
Proven major-incident leadership, including executive and customer communications under pressure.
Strong grasp of security operations tools such as SIEM, SOAR, and EDR/XDR.
Strong grasp of network operations tooling, including monitoring, observability, and IT service management.
Executive presence with customers and senior leaders, and the ability to explain operational issues in business terms.
Willingness to travel internationally to lead global teams.

Nice To Haves

Experience at an MSP, MSSP, MDR provider, or managed network services provider (MNSP).
Background in retail, hospitality, payments, or other multi-site environments, including PCI DSS.
Experience leading a converged or integrated SOC and NOC.
Experience building or scaling offshore delivery centers.
A track record of leading automation or AI-driven change in operations.
Familiarity with SOC 2, ISO 27001, and ITIL, as well as cloud operations across AWS, Azure, or GCP.
Certifications such as CISSP, CISM, or ITIL.
A bachelor's degree in a related field or equivalent experience.

Responsibilities

Lead the SOC, NOC, and Threat Intelligence & Detection functions through about five direct reports.
Design the operating model, including organization structure, onshore and offshore shift coverage, and the appropriate integration of security and network teams.
Standardize processes, escalation paths, and playbooks across security and network operations.
Own the operating budget, headcount plan, and tooling and vendor spend.
Improve cost to serve and delivery margin while maintaining or raising service quality, including balancing onshore and offshore delivery.
Provide cost and capacity input to pricing, capacity planning, and new service launches.
Oversee 24/7 security monitoring, triage, investigation, and response across customer environments.
Ensure threat intelligence informs detection coverage and threat hunting through the Threat Intelligence & Detection leader.
Own customer security incident response from initial alert through post-incident review.
Oversee 24/7 network monitoring and response for site connectivity, uptime, and performance across thousands of locations.
Oversee managed network services, including managed firewall, managed switches, SD-WAN, wireless, and connectivity.
Manage carrier, ISP, and vendor escalations, change and maintenance windows, and service management practices.
Serve as the single accountable leader for high-severity security, network, or combined incidents.
Lead customer and executive communications during major incidents and drive lasting root-cause fixes.
Set the multi-year roadmap for SIEM, SOAR, network monitoring, and observability, including an integrated view of security events and network health.
Lead the adoption of AI-assisted and automated operations to reduce manual work, alert noise, and response times.
Act as executive sponsor for key customers through service reviews, escalations, and strategic discussions.
Partner with Product, Sales, Operations, and Customer Success to shape offerings and align operations with customer needs.
Manage the business using metrics including detection and response times, uptime and SLA performance, detection coverage, alert quality, customer satisfaction, and cost to serve.
Assess the organization, tooling, service levels, and cost structure; meet key customers and offshore teams; and agree on priorities with the SVP & GM during the first 90 days.
Establish a unified operating model and leadership structure, a shared major-incident process, and a common KPI and SLA dashboard by six months.
Deliver measurable improvements in uptime, response times, and cost to serve, an effective automation roadmap, and readiness for new service launches by 12 months.
Travel internationally to lead global teams.