Senior Manager Security Automation

ABOUT THE ROLE

The Senior Manager Information Security is responsible for leading the security automation product team and driving the development, integration and continuous improvement of a security automation platform. This role combines strong leadership, technical acuity, and product ownership skills to supervise a growing team responsible for automating security workflows, integrating tools, improving operational efficiency, and strengthening the overall cybersecurity posture.

As the product owner of the security automation platform and service, the Senior Manager Information Security collaborates with collaborators to deliver impactful automations and maintain a scalable, secure, and resilient automation infrastructure.

Key aspects of the role include aligning automation projects with organizational security goals, fostering innovation in machine learning applications, and ensuring the adoption of industry-leading practices by staying ahead of with evolving threats and trends.

Roles & Responsibilities:

• Lead and mentor a team of security automation engineers, data engineers, and data scientists, fostering a collaborative and high-performance culture
• Oversee the security automation service, ensuring effective operations, prioritization, and continuous alignment with business and security goals
• Oversee the security automation product team to ensure adherence to SAFe/Agile methodologies and definitions of done, maintaining high-quality standards in deliverables
• Oversee the seamless operation, scalability, and efficiency of a cloud-based security automation solution, ensuring continuous enhancement of security controls and automation capabilities
• Develop strategies to streamline incident response, threat detection, and remediation processes using automation capabilities
• Drive and manage the seamless integration of new and existing security tools, platforms, and workflows to ensure a cohesive and optimized automation ecosystem
• Ensure compliance with relevant regulations (e.g., GDPR, HIPAA) and industry standards (e.g., ISO 27001, NIST)
• Collaborate with collaborators to establish and supervise critical metrics related to SAFe implementation
• Generate and maintain security reports, metrics, and dashboards for management review
• Keep up to date with the latest security threats, trends, and technologies, and provide recommendations for improving security operations
• Build and deliver knowledge sharing presentations and documentation to educate developers and operations teams on application security standard methodologies and secure coding techniques
• Triage and assess findings from tools, external reports, and tests to determine real risks and prioritize remediation efforts
• Offer remediation guidance to partners for identified issues and serve as a customer concern resource for developers as they reduce issues

What we expect of you

We are all different, yet we all use our unique contributions to serve patients. The professional we seek is a senior manager with these qualifications.

Basic Qualifications:

• Masters degree and 8 to 10 years of Scrum teams management or related field experience OR
• Bachelors degree and 8 to 10 years of in Scrum teams management or related field experience OR
• Diploma and 12 to 14 years of in Scrum teams management or related field experience.

Preferred Qualifications:

• Experience managing and scaling security automation platforms and tools (e.g., SOAR)
• Demonstrated success in leading high-performing technical teams in an agile environment
• Strong understanding of integrating security tools and data platforms (SIEM, EDR, IAM, etc.)
• In-depth knowledge of cybersecurity frameworks, technologies, and best practices
• Experience in risk management, incident response, and security governance
• Strong knowledge of security architecture frameworks and principles
• Strong understanding of common software and web application security vulnerabilities
• Excellent communication, stakeholder management, and analytical skills.

Good-to-Have Skills:

• Experience with network security, endpoint protection, and incident response
• Proficiency in scripting and automation (e.g., Python, Bash) is a plus

Professional Certifications:

• CEH (preferred)
• CompTIA Security+ (preferred)
• CISSP (preferred)
• TOGAF (preferred)
• Certified Scrum Product Owner (CSPO), or equivalent (preferred)

Soft Skills:

• Initiative to explore alternate technology and approaches to solving problems
• Skilled in breaking down problems, documenting problem statements, and estimating efforts
• Excellent analytical and troubleshooting skills
• Strong verbal and written communication skills
• Ability to work effectively with global, virtual teams
• High degree of initiative and self-motivation
• Ability to manage multiple priorities successfully
• Team-oriented, with a focus on achieving team goals