Vice President, Cyber Security

Oaktree Capital Management, L.P.•Los Angeles, CA

4d•$170,000 - $200,000

About The Position

Oaktree is seeking a hands-on Vice President, Cyber Security, to lead cyber security operations, security engineering, and technical security architecture. Reporting to the Senior Vice President, Technology, the role is part of the Information Security, Architecture, Engineering & Operations organization and is accountable for day-to-day cyber security execution, technical escalations, and delivery of priorities set by the SVP. The successful candidate will combine technical depth and sound judgment to lead complex incidents, investigate issues, challenge designs, and build solutions. The role leads security engineers and analysts and works closely with technology teams and managed security service providers to implement and operate effective defenses. The Vice President provides technical leadership and delivery oversight; leads security operations, incident response, security engineering, automation, vulnerability and exposure management, data protection, and application security; and supports technical remediation and control testing for GRC and Internal Audit engagements. The role also develops staff, maintains operational readiness, measures security performance, and communicates risks and recommendations to leadership.

Requirements

10 or more years of progressive cyber security experience, including substantial hands-on security engineering or architecture work.
At least 3 years leading technical teams, with demonstrated ability to set priorities, coach engineers and analysts, and deliver security improvements.
Demonstrated ability to lead security operations and incident response, make sound containment decisions, and coordinate internal teams and managed service providers under pressure.
Strong hands-on experience with enterprise security platforms, including SIEM/SOAR, EDR/XDR, email security, and data protection.
Strong knowledge of Microsoft 365 and Windows environments, including endpoint protection and security logging, and ability to investigate telemetry, inspect configurations, and troubleshoot complex issues.
Experience reviewing technical architecture, conducting threat modeling, and designing security controls for endpoints, applications, data, and security platforms.
Ability to write and review automation in PowerShell, Python, or a comparable language and integrate security tools through APIs.
Experience driving vulnerability remediation and validating technical controls.
Working knowledge of CIS Controls, MITRE ATT&CK, and secure configuration baselines.
Strong written and verbal communication and execution skills, including explaining technical risks to leadership, collaborating with GRC and Internal Audit, and driving engineering actions to completion.
Bachelor’s degree in Computer Science, Computer Engineering, Information Technology, Cyber Security, or a related field.

Nice To Haves

Experience in investment management, financial services, or another regulated enterprise with a high level of service to business users.
Experience with Microsoft Defender, Microsoft Purview, CrowdStrike Falcon, Splunk or Microsoft Sentinel, and managed SOC or MDR operating models.
Exposure to secure development practices and enterprise AI security, including connectors, agents, data access, and human oversight.
CISSP, GCIH, GCIA, or comparable security certifications.

Responsibilities

Provide day-to-day technical leadership to security engineers and analysts, coordinating priorities and delivery across internal teams, global locations, and service providers.
Translate the security roadmap into a prioritized delivery plan with clear owners, milestones, and measurable outcomes; resolve dependencies and follow issues through to closure.
Represent the SVP in delegated technical discussions, project decisions, and escalations; communicate risks, options, and recommendations, and promptly escalate material decisions.
Coach engineers and analysts, strengthen technical capability, and establish accountability for service quality and delivery.
Lead technical remediation and control testing for GRC and Internal Audit engagements, with clear ownership and audit-ready closure evidence.
Lead technical response to security incidents, coordinating investigation, containment, eradication, and recovery with technology teams and managed security providers.
Maintain incident playbooks, escalation paths, and response readiness; coordinate exercises and post-incident reviews, preserve evidence, and ensure corrective actions are completed.
Hold managed SOC, detection and response, and threat hunting providers accountable for coverage, investigation quality, timely escalation, and service performance.
Improve detection use cases, telemetry, alert tuning, and threat hunting using threat intelligence and attacker behaviors; validate coverage across endpoints, email, enterprise applications, and collaboration platforms.
Lead implementation and improvement of security technologies, including SIEM, EDR/XDR, email security, and data protection controls; work with Endpoint Engineering on integration and hardening and test configurations and integrations.
Build and guide automation using APIs, scripting, and orchestration to improve detection, investigation, response, and control validation, with appropriate testing and change management.
Establish operational ownership, platform health monitoring, runbooks, and support processes, and reduce control gaps, unnecessary complexity, and recurring manual work.
Lead technical security design reviews and threat modeling for applications, system integrations, and security technologies, translating findings into practical design requirements and engineering changes.
Develop reusable security patterns and technical standards with Enterprise Architecture and engineering teams, emphasizing secure configurations, defense in depth, and operational resilience.
Validate security designs through technical testing and confirm new capabilities integrate with detection, investigation, and response processes before production rollout.
Lead the vulnerability and exposure management lifecycle, prioritizing remediation using exploitability, asset criticality, business impact, and attack paths.
Coordinate penetration tests and adversary simulations, convert findings into assigned remediation plans, and validate fixes and compensating controls.
Measure detection and response performance, security platform health, coverage gaps, and remediation progress; use results to prioritize improvements and provide concise updates to the SVP.
Engineer and tune data protection controls, including sensitivity label enforcement, DLP detections, and investigation workflows, in coordination with data owners.
Partner with application development teams on secure design, code and dependency scanning, and remediation.
Work with AI Technology & Security leads to review access, data flows, and agent permissions for enterprise AI adoption, and use approved AI tools to improve security workflows with appropriate validation.