Security Operations Manager

CIM Group, LP • Los Angeles, CA

5d • $120,000 - $135,000

About The Position

The Security Operations Manager is accountable for CIMs’ readiness to prevent, respond to, and recover from cybersecurity incidents. This role is accountable for CIM’s cybersecurity posture by ensuring the appropriate controls are in place, our user population has the necessary cybersecurity training, and the day-to-day management of cybersecurity threats are handled appropriately. The Security Operations Manager partners closely with Engineering, Support, Compliance, and Product teams to ensure controls are effective, risks are actively managed, and operations support overall business continuity and resilience objectives.
This role plays a critical part in protecting our customers, employees, and operations, while enabling the business to grow securely and confidently.

Requirements

• Minimum 8 years of Cybersecurity analyst/management experience.
• Bachelor’s Degree in a technical field required.
• Formal training in Cybersecurity governance, risk, and compliance (GRC).
• Understanding of Cybersecurity communities (OWASP).
• Understanding of SOC 2, SOX, NIST, and GDPR compliance.
• Expert knowledge of information security principles, practices, and architectures.
• Expert knowledge with Threat Detection, Email Security, DLP, Data Governance tools such as Proofpoint, MS Defender, or Mimecast.
• Hands-on experience with the development of Cybersecurity Training and Phishing Campaigns.
• Experience with leading Disaster Recovery programs.
• Experience with Vulnerability Management Platforms such as Rapid7 and Qualys.
• Experience with Patch Management platforms such as SCCM and Ivanti.
• Understanding of supporting technology audits and testing technology controls.
• Understanding of cloud environments such as Azure, SalesForce.com and Office365.

Nice To Haves

• CISSP or CISM certification strongly preferred.
• Ability to produce executive reporting to illustrate Cybersecurity posture and areas for improvement.
• Ability to communicate and present ideas and recommendations effectively to Technology management.
• Ability to translate Cybersecurity information into a manner that end users can understand.

Responsibilities

• Ensure security alerts and anomalous activities are continuously monitored, accurately logged, and escalated in accordance with established procedures.
• Lead and coordinate timely, effective response to cybersecurity incidents to minimize business impact.
• Support restoration of affected systems and services following cybersecurity incidents, including leading forensic investigations as required.
• Research emerging threats and attack vectors, and implement appropriate countermeasures to continuously strengthen the organization’s security posture.
• Coordinate internal and external penetration testing activities to identify and remediate exploitable weaknesses.
• Ensure protective security controls are implemented and operating effectively to reduce risk exposure.
• Coordinate with compliance and IT teams to design, implement, and maintain operational security controls.
• Support asset cataloging and ownership alignment to ensure accountability for systems, data, and security controls.
• Execute quarterly User Access Reviews across the application portfolio in an efficient manner.
• Respond to external audit and compliance questionnaires, providing accurate and timely security documentation and evidence.
• Ensure employees, vendors and/or contractors with access to systems and data are appropriately trained in relevant security awareness and individual security responsibilities.
• Design, manage, and enforce the organization’s security awareness program, including the execution of recurring phishing simulation campaigns.
• Support the development, testing, and ongoing improvement of Disaster Recovery plans to ensure the organization can effectively respond to and recover from disruptive events, including cybersecurity incidents.
• Serve as a trusted security advisor to internal teams, raising awareness and providing guidance to help protect products, systems, and services from known and emerging threats.

Benefits

• A variety of Medical, dental, and vision benefit plans
• Health Savings Account with a generous employer contribution
• Company paid life and disability insurance
• 401(k) savings plan, with company match
• Comprehensive paid time off, including: vacation days, 10 designated holidays, sick time, and bereavement leave
• Up to 16 hours of volunteer time off
• Up to 16 weeks of Paid Parental Leave
• Ongoing professional development programs
• Wellness program, including monthly and quarterly prizes

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 501-1,000 employees