IT Security Operations Manager

Loudoun County Government•Leesburg, VA

1d•Onsite

About The Position

Loudoun County's Department of Information Technology is seeking an IT Security Operations Manager to lead day-to-day cybersecurity operations and staff. This role drives Security Operations Center (SOC) maturity and operational effectiveness through collaboration with vendor partners, internal stakeholders, and the strategic direction set by the Chief Information Security Officer (CISO). The manager supervises staff, manages IT vendor contracts, oversees the security stack lifecycle, ensures compliance of IT security systems and policies, assists departments with system needs, and represents the Information Security Office in various meetings and conferences. Loudoun County is recognized as one of Forbes' 2025 Best Large Employers, committed to employee satisfaction and public service excellence in a dynamic, growing community.

Requirements

Bachelor’s degree in computer science/information technology, cybersecurity, network, or IT systems administration; OR equivalent combination of education and experience.
Four (4) years of relevant experience in information technology security.
One (1) year of supervisory or lead level work experience.

Nice To Haves

Knowledge of best practices in Information Security policies, technologies, and procedures.
Knowledge of methods, practices, principles, and techniques of management and supervision.
Knowledge of budget and accounting principles.
Knowledge of information technology security-related laws and regulations.
Knowledge of risk management principles and techniques.
Skill in supervising and organizing.
Ability to communicate clearly and effectively, both orally and in writing.
Ability to facilitate groups and make presentations.
Ability to prepare complex reports and documents.
Ability to conduct research, compile data, and formulate results and recommendations.
Ability to operate automated systems and office software applications.
Ability to establish and maintain effective working relationships with fellow employees, County leadership, vendors, and the general public.
Industry certifications such as CISSP, CISM, CISA, and PMP.
Information Technology Infrastructure Library Foundation certification (ITIL), Project Management Professional certification (PMP), or Certified Associate in Project Management (CAPM).
Experience in Monday.com; Leankit tools; other project management software; SharePoint; Teams; and ServiceNow software.

Responsibilities

Leading SOC functions, transitioning from reactive triage to proactive defense-in-depth aligned with County risk reduction goals.
Orchestrating incident response, balancing automated detection with critical human oversight.
Directing high-priority incident response efforts and overseeing root cause analysis and corrective action implementation.
Managing strategic partnerships with Managed Detection and Response (MDR) providers.
Overseeing SIEM/XDR alert triage and use-case validation.
Directing enterprise vulnerability scanning cadence and remediation SLAs.
Standardizing and improving SOC documentation, including runbooks, SOPs, and automated playbooks.
Evaluating global threat intelligence feeds for local applicability.
Reviewing and approving critical policy changes for firewalls, MFA, VPN, and MDM.
Developing and presenting monthly operational reports to the CISO and CIO.
Leading the adoption of AI-enhanced capabilities within security operations.
Ensuring compliance with relevant laws and policies.
Representing the County and Information Security Office with internal and external organizations.