Manager - Information Security

Mayo Clinic•Rochester, MN

1d•Hybrid

About The Position

The Cybersecurity Operations Center (SOC) Manager in the Office of Information Security is responsible for leading, managing, and continuously improving the SOC. This role oversees coverage for day-to-day 24x7 incident monitoring, including detection, triage, investigation, containment, eradication, and recovery of cybersecurity incidents. The SOC Manager provides leadership to SOC analysts by setting expectations, developing talent, identifying skill gaps, and promoting a culture of accountability, collaboration, and operational excellence. The position collaborates with Information Security teams such as IAM, Data Protection, Application Protection, Infrastructure Protection, Threat Intelligence, Detection Engineering, Security Testing Services, Information Security Awareness & Education, Information Technology as well as business proponents to ensure information security incidents are remediated in a timely manner. The SOC Manager supports healthcare regulatory compliance, audit readiness, and evidence retention while ensuring SOC processes align with frameworks such as NIST CSF 2.0, NIST SP 800-61, and HIPAA regulations. This leader develops and reports executive-level metrics, including MTTD, MTTR, incident trends, escalation rates, analyst productivity, and SLA performance, to demonstrate SOC effectiveness and operational maturity. The SOC Manager also evaluates detection and response capabilities, advances AI and automation opportunities, and enhances operational efficiencies to reduce organizational cyber risk, strengthen team performance, and deliver measurable cybersecurity value. The Information Security Manager provides operational and tactical leadership for a defined security service, function, or team. This role translates Information Security strategy, risk requirements, and policies into effective day to day execution; ensures reliable, compliant service delivery; and fosters a strong security culture. Operating within the Risk organization, the Manager partners with business and technology stakeholders to identify, assess, and manage information security risk in a regulated environment.

Requirements

Bachelors degree in applicable field plus eight (8) years of relevant experience.
Pertinent fields of study and experience include, but are not limited to, information security, computer science, information systems, risk management, or a related field.
Three years leadership/management experience (i.e. guiding technical staff, leading technical projects, or leading teams).
One or more of the following certifications (or equivalent) are required at time of hire: CISSP, CISM, GSEC, OSCP.

Nice To Haves

Master’s degree in applicable field plus six (6) years of relevant experience preferred.
Pertinent fields of study and experience include, but are not limited to, information security, computer science, information systems, risk management, or a related field.
Three years leadership/management experience (i.e. guiding technical staff, leading technical projects, or leading teams).

Responsibilities

Leading, managing, and continuously improving the SOC.
Overseeing coverage for day-to-day 24x7 incident monitoring, including detection, triage, investigation, containment, eradication, and recovery of cybersecurity incidents.
Providing leadership to SOC analysts by setting expectations, developing talent, identifying skill gaps, and promoting a culture of accountability, collaboration, and operational excellence.
Collaborating with Information Security teams and business proponents to ensure information security incidents are remediated in a timely manner.
Supporting healthcare regulatory compliance, audit readiness, and evidence retention.
Ensuring SOC processes align with frameworks such as NIST CSF 2.0, NIST SP 800-61, and HIPAA regulations.
Developing and reporting executive-level metrics, including MTTD, MTTR, incident trends, escalation rates, analyst productivity, and SLA performance.
Evaluating detection and response capabilities.
Advancing AI and automation opportunities.
Enhancing operational efficiencies to reduce organizational cyber risk, strengthen team performance, and deliver measurable cybersecurity value.
Providing operational and tactical leadership for a defined security service, function, or team.
Translating Information Security strategy, risk requirements, and policies into effective day to day execution.
Ensuring reliable, compliant service delivery.
Fostering a strong security culture.
Partnering with business and technology stakeholders to identify, assess, and manage information security risk in a regulated environment.