Senior Manager, Security Operations- Bala Cynwyd, PA

TMNA Services•Bala Cynwyd, PA

2d•$132,000 - $160,000

About The Position

Tokio Marine North America Services (TMNAS) provides professional support services to Tokio Marine Group companies in the United States, including Tokio Marine America, First Insurance Company of Hawaii, and Philadelphia Insurance Companies. Customer service is our focus and our passion! Tokio Marine North America Services adds value in all that we do, providing the best professional service to our business partners, allowing them to achieve their goals. Our talented team delivers actuarial, audit, corporate communications, financial and investment, human capital services, information technology, legal, and payroll expertise to our customers. Job Summary: The Senior Manager, Cyber Resiliency is an integral member of the cybersecurity leadership team, reporting directly to the Principal Manager, Security Threat, Monitoring, and Risk. This role is responsible for developing and maintaining the organization’s cyber incident response plans, overseeing documentation, leading multiple cyber-related tabletop exercises annually, and partnering with key internal stakeholders, including Business Continuity Management and the TMR Incident Response team.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, or a related field preferred
Minimum of 7 years’ experience in cybersecurity, including at least 3 years in a managerial or leadership capacity
Demonstrated experience in designing and executing cyber tabletop exercises
Strong knowledge of incident response frameworks, business continuity principles, and risk management methodologies
Excellent communication, organizational, and collaboration skills
Ability to weigh business needs against security concerns and articulate to management
Knowledge of organizational politics and political tactics; ability to effectively navigate formal and informal communication and decision-making channels
Knowledge, insight, and understanding of business concepts and processes that are needed for making sound decisions in the context of the company's business; ability to apply this knowledge appropriately to diverse situations
Working knowledge of Microsoft Office, and strong knowledge in Microsoft Excel preferred
Strong writing and communication skills
Strong customer service orientation toward Business Units requiring financial consultation (responsive, consultative, collaborative and accurate)
Strong leadership ability: able to work with a group to set its objectives and agenda, generate allegiance to those objectives, and guide and motivate achievement
Strong project management skills: Plan, organize, monitor, and control projects, ensuring efficient utilization of resources, to achieve project objectives and deadlines
Strong interpersonal relationship building skills: able to work with a variety of people and groups in a constructive and collaborative manner
Strong analytical ability with the capability to determine the root cause of problems and issues and provide solutions
Strategic thinking: Applies organizational acumen to identify and maintain focus on key success factors for the organization
Superior attention to detail
A bility to juggle multiple, competing, frequently changing time-sensitive deadlines and priorities
Ability to work independently and without supervision
Ability to work and lead effectively as part of a team

Nice To Haves

Preferred certifications: CISSP, CISM, CBCP, or equivalent

Responsibilities

Cyber Incident Response Planning: Develop, update, and maintain comprehensive incident response plans, ensuring they are in alignment with organizational risk profiles and regulatory requirements. Guarantee accessibility and accuracy of documentation for relevant teams
Tabletop Exercise Leadership: Design, facilitate, and manage multiple cyber tabletop exercises (TTX) each year to evaluate and improve the organization’s readiness and response capabilities. Produce after-action reports and drive continuous improvement initiatives based on findings
Documentation Oversight: Ensure all cyber incident response documentation reflects the latest industry best practices and compliance standards and is regularly reviewed and updated
Business Continuity Integration: Collaborate proactively with the Business Continuity Management team to align cyber resiliency strategies with wider business continuity and disaster recovery plans
Incident Response Team Partnership: Partner closely with the TMR Incident Response Team to coordinate response activities, share threat intelligence, and maintain clear communication channels during cyber incidents
Stakeholder Engagement: Serve as the primary point of contact for internal and external stakeholders on matters related to cyber resiliency and incident response preparedness
Continuous Improvement: Keep current with evolving cyber threats and industry trends to refine incident response plans and exercise scenarios as needed