Security Operations Senior Manager

help global organizations get financial clarity into the complex, daily sales, and operational decisions that impact profitable revenue generations, efficient operational performance, and reliable financial management.

At Spaulding Ridge, we believe all business is personal. Core to our values is our relationships with our clients, our business partners, our team, and the global community. Our employees dedicate their time to helping our clients transform their business, from strategy through implementation and business transformation.

What You Will Do And Learn

As a Senior Manager on the Technology and Security team, you will be responsible for ensuring Spaulding Ridge’s security stance. This position is not traditional management and will require front line leadership and collaboration across multiple teams and some hands-on project work.

Ideal candidates will be able to:
• Security Strategy: Developing and implementing a comprehensive security strategy for the organization, including identifying potential threats and vulnerabilities, and establishing appropriate security controls and measures including secure code standards and framework.
• Project Management: Oversee related projects and initiatives. This includes resource management, budgets, and delivery
• Incident Response: Leading the incident response team in detecting, analyzing, and responding to security incidents. This involves coordinating with other teams, such as the red team (penetration testers) and the SOC (Security Operations Center), to ensure a timely and effective response.
• Security Automation: Assist in automation efforts to leverage security and endpoint management tools to support reporting controls dashboard using Python and/or SQL.
• Security Operations: Overseeing the day-to-day security operations, including monitoring and analyzing security logs, managing security incidents, and ensuring compliance with security policies and procedures.
• Risk Management: Assessing and managing security risks by conducting risk assessments, identifying potential vulnerabilities, and implementing risk mitigation strategies.
• Security Architecture: Collaborating with the IT architecture team to design and implement secure IT infrastructure, systems, and applications. This includes evaluating and selecting security technologies, conducting security reviews, and ensuring the integration of security controls into the overall architecture.
• Compliance and Audit: Ensuring compliance with relevant security standards, regulations, and industry best practices. This involves conducting regular security audits, coordinating with internal and external auditors, and addressing any identified security gaps or non-compliance issues.
• Vendor Management: Evaluating and managing relationships with third-party vendors and service providers to ensure their security practices align with the organization's requirements and standards.
• Incident Reporting and Communication: Preparing and presenting reports on security incidents, trends, and metrics to senior management and other stakeholders. This includes providing recommendations for improving security posture and addressing any identified weaknesses.
• Continuous Improvement: Staying updated with the latest security threats, technologies, and industry trends to continuously improve the organization's security posture. This may involve participating in industry forums, attending conferences, and pursuing relevant certifications.

Qualifications:
• 8+ years in direct technology roles
• 5+ years of experience in Cyber security roles
• 4+ years of team management experience including growing new technology teams
• Demonstrates a high level of attention to detail
• Exhibits persistent problem-solving skills, actively seeking solutions and overcoming challenges.
• Displays a proactive attitude towards learning new technologies, embracing opportunities to expand knowledge and skills.
• Recognizes the importance of documentation and adheres to established procedures, ensuring efficient and organized work processes.
• Solid knowledge of cybersecurity trends, technologies, and risk management principles
• Exceptional communication skills to foster collaboration and alignment among diverse teams
• BS or Master’s Degree in Computer Science, Cybersecurity, Information Technology or a related field desired
• Working knowledge of Python and SQL including usage of REST API