Manager, Cybersecurity Operations

Xeris Pharmaceuticals, Inc.•Chicago, IL

121d•$120,000 - $165,000•Hybrid

About The Position

The Manager, Cybersecurity Operations owns day-to-day security operations and incident response, with a strong focus on Microsoft Azure, Microsoft 365 (including Defender, Purview, DLP, and IRM), and key SaaS platforms. The role provides strategic and hands-on leadership for the security operations team and is accountable for the effectiveness and maturity of security operations in support of the company’s risk management and compliance programs. This is a hybrid position based in Xeris’ Chicago office, requiring at least three days per week onsite. On-site requirements may change at management’s discretion. The position may require periodic evening and weekend work as necessary, as well as periodic overnight travel. The anticipated base salary range is $120,000 to $165,000. Employees in non-sales roles are eligible for an annual bonus; equity or long-term incentive awards may also be available where applicable. The company offers a comprehensive benefits package, including paid time off, health, vision, and dental insurance options, and 401(k) retirement benefits for eligible employees.

Requirements

Bachelor’s degree in computer science, information systems, cybersecurity, or equivalent experience.
At least 5 years of progressive cybersecurity experience with demonstrated leadership responsibility.
Hands-on experience with IAM, SIEM, and vulnerability management tools, ideally in a Microsoft-centric environment such as Azure AD/Entra ID, Microsoft 365, and the Defender suite.
Strong understanding of cybersecurity frameworks and controls such as NIST CSF, ISO 27001, and CIS, and their application in day-to-day operations and governance.
Proven ability to lead incident response, coordinate cross-functional stakeholders, and communicate clearly with technical and non-technical audiences.
Demonstrated team leadership, collaboration, and project management skills.
Strong written and verbal communication, attention to detail, and adaptability in a fast-changing environment.

Responsibilities

Lead security operations, including monitoring, triage, and response to alerts across Azure, Microsoft 365, Windows 365, endpoints, identity, email, and core SaaS applications.
Direct and coordinate Managed Detection and Response (MDR) and SOC partners, ensuring clear runbooks, effective SLAs, and high-quality investigations and escalations.
Manage and coach the security operations team and partner with Infrastructure, Applications, Legal, Compliance, and business leaders to embed security into day-to-day processes.
Establish checks and balances between IT and cybersecurity so IT focuses on delivery and operations while cybersecurity independently governs, monitors, and enforces controls.
Develop, maintain, and continuously improve runbooks and standard operating procedures for common security events and operational tasks.
Oversee root cause analysis, basic forensics, and threat hunting across identity, email, endpoint, and cloud workloads.
Drive incident lifecycle management, including tracking metrics, trends, remediation progress, and lessons learned for technology and business leadership.
Support protection of crown-jewel assets through data classification, conditional access, and policy enforcement across Microsoft 365 and key business systems.
Partner in governance activities, including GRC platform administration, NIST-based control assessments, InfoSec steering committee inputs, and security improvement tracking.
Perform vendor cybersecurity due diligence, including security questionnaires, DDQs, and monitoring enrollment, and manage third-party risk operations with Procurement and Legal.
Maintain an accurate inventory of security-relevant assets, including devices, SaaS applications, and privileged accounts, to support monitoring, access control, and vulnerability management.
Contribute to security awareness efforts, including annual training, Cybersecurity Awareness Month activities, and targeted campaigns.
Partner with the Director of Infrastructure and Security on KPIs, operational risk metrics, and budget planning for tools, services, and managed partners.
Identify and recommend opportunities to automate and streamline security operations and system administration.