Vice President, Cyber Security

Oaktree Capital Management•Los Angeles, CA

About The Position

Oaktree is seeking a hands-on Vice President, Cyber Security, to lead cyber security operations, security engineering, and technical security architecture. Reporting to the Senior Vice President, Technology, this role is part of the Information Security, Architecture, Engineering & Operations organization and is accountable for day-to-day cyber security execution, technical escalations, and delivery of priorities set by the SVP. The successful candidate will lead security engineers and analysts in partnership with technology teams and managed security service providers, combining technical depth with the judgment to lead complex incidents, make sound technical decisions, investigate issues, challenge designs, and build solutions. The role leads technical delivery, cyber security operations and incident response, security engineering and automation, vulnerability and exposure management, data protection, and application security. It includes translating the security roadmap into prioritized work, ensuring audit-ready remediation, maintaining incident readiness, improving detection and response capabilities, reviewing designs and threat models, and partnering with application development and AI security teams. The position requires a bachelor's degree in a relevant field and at least 10 years of progressive cyber security experience, including substantial hands-on security engineering or architecture work and at least 3 years leading technical teams. The base salary is $170,000–$200,000, with eligibility for discretionary bonus incentives, a comprehensive benefits package, and a flexible work arrangement. The position reports to the Senior Vice President, Technology.

Requirements

At least 10 years of progressive cyber security experience, including substantial hands-on security engineering or architecture work.
At least 3 years leading technical teams, with demonstrated ability to set priorities, coach engineers and analysts, and deliver security improvements.
Demonstrated ability to lead security operations and incident response, make sound containment decisions, and coordinate internal teams and managed service providers under pressure.
Strong hands-on experience with enterprise security platforms, including SIEM/SOAR, EDR/XDR, email security, and data protection.
Strong knowledge of Microsoft 365 and Windows environments, including endpoint protection and security logging, with the ability to investigate telemetry, inspect configurations, and troubleshoot complex issues.
Experience reviewing technical architecture, conducting threat modeling, and designing security controls for endpoints, applications, data, and security platforms.
Ability to write and review automation in PowerShell, Python, or a comparable language, and integrate security tools through APIs.
Experience driving vulnerability remediation and validating technical controls.
Working knowledge of CIS Controls, MITRE ATT&CK, and secure configuration baselines.
Strong written and verbal communication and execution skills, including the ability to explain technical risks to leadership, collaborate with GRC and Internal Audit, and drive engineering actions to completion.
Bachelor’s degree in Computer Science, Computer Engineering, Information Technology, Cyber Security, or a related field.

Nice To Haves

Experience in investment management, financial services, or another regulated enterprise with a high level of service to business users.
Experience with Microsoft Defender, Microsoft Purview, CrowdStrike Falcon, Splunk or Microsoft Sentinel, and managed SOC or MDR operating models.
Exposure to secure development practices and enterprise AI security, including connectors, agents, data access, and human oversight.
CISSP, GCIH, GCIA, or comparable security certifications.

Responsibilities

Provide day-to-day technical leadership to security engineers and analysts, coordinating priorities and delivery across internal teams, global locations, and service providers.
Translate the security roadmap into a prioritized delivery plan with clear owners, milestones, and measurable outcomes; resolve dependencies and follow issues through to closure.
Represent the SVP in delegated technical discussions, project decisions, and escalations; communicate risks, options, and recommendations, and promptly escalate material decisions.
Coach engineers and analysts, strengthen technical capability, and establish accountability for service quality and delivery.
Lead technical remediation and control testing for GRC and Internal Audit engagements, tracking engineering actions through audit-ready closure.
Lead internal technical responses to security incidents, coordinating investigation, containment, eradication, and recovery with technology teams and managed security providers.
Maintain incident playbooks, escalation paths, and response readiness; coordinate exercises and post-incident reviews, preserve evidence, and ensure corrective actions are completed.
Hold managed SOC, detection and response, and threat hunting providers accountable for coverage, investigation quality, timely escalation, and service performance.
Improve detection use cases, telemetry, alert tuning, and threat hunting using threat intelligence and attacker behaviors; validate coverage across endpoints, email, enterprise applications, and collaboration platforms.
Lead implementation and improvement of security technologies, including SIEM, EDR/XDR, email security, and data protection controls; coordinate integration and hardening with Endpoint Engineering and verify configurations through testing.
Build and guide automation using APIs, scripting, and orchestration to improve detection, investigation, response, and control validation, with appropriate testing and change management.
Establish operational ownership, platform health monitoring, runbooks, and support processes, while reducing control gaps, unnecessary complexity, and recurring manual work.
Lead technical security design reviews and threat modeling for applications, system integrations, and security technologies; turn findings into practical design requirements and engineering changes.
Develop reusable security patterns and technical standards with Enterprise Architecture and engineering teams, emphasizing secure configurations, defense in depth, and operational resilience.
Validate security designs through technical testing and confirm new capabilities integrate with detection, investigation, and response processes before production rollout.
Lead the vulnerability and exposure management lifecycle, prioritizing remediation by exploitability, asset criticality, business impact, and attack paths.
Coordinate penetration tests and adversary simulations, assign remediation plans, and validate that fixes and compensating controls are effective.
Measure detection and response performance, security platform health, coverage gaps, and remediation progress; use results to prioritize technical improvements and update the SVP.
Engineer and tune data protection controls, including sensitivity label enforcement, DLP detections, and investigation workflows, in coordination with data owners.
Partner with application development teams on secure design, code and dependency scanning, and remediation.
Work with AI Technology & Security leads to review access, data flows, and agent permissions for enterprise AI adoption; use approved AI tools to improve security workflows with appropriate validation.