Director - Threat Management

StoneX Group Inc.; Bengaluru; On-site; INR 35,000,000 - 45,000,000; Full time

Job summary

StoneX Group Inc. is looking for a Director of Threat Management to lead their global Threat Management organization. This role involves strategic leadership in security operations, incident response, and developing a culture of collaboration and accountability.

The ideal candidate will have extensive experience in cybersecurity and operational transformation, focusing on modernizing security operations through AI and strong leadership in high-pressure environments.

Qualifications

• 12+ years of experience in cybersecurity and relevant technology domains.
• 7+ years in leadership roles focused on Threat Management.
• Experience in managing operational transformation initiatives.

Responsibilities

• Define and execute the Threat Management strategy.
• Lead global operations and incident response.
• Drive modernization initiatives in security operations.

Skills

Leadership in global security operations

Operational excellence

Cybersecurity knowledge

Crisis management

Cloud security

Education

Bachelor’s or master’s degree in relevant fields

Tools

Security Operations Center (SOC)

AI and automation tools

Job description

Job Purpose

At StoneX, Threat Management is more than monitoring alerts and responding to incidents—it’s about building the capabilities, teams, and intelligence that allow the business to operate confidently in an evolving threat landscape. As the Director of Threat Management, you’ll lead the strategy and execution behind our global Threat Management organization, including the Security Operations Center (SOC), Threat Detection & Applied Intelligence (TDAI), Exposure Management (Vulnerability M a nagement and Threa t Intelligence), and Insider Risk. Your mission is to shape the future of how StoneX detects, responds to, and reduces cyber risk at scale. You’ll lead through transformation—modernizing operations, driving AI and automation adoption, strengthening detection and response capabilities, and developing resilient teams that can adapt to rapidly changing threats. This isn’t a role for managing alerts or operating tools directly—it’s a role for leading people, setting vision, and driving operational maturity through empowered teams and leaders. You’ll partner with technology, infrastructure, legal, HR, compliance, and business leadership to ensure Threat Management remains aligned to business priorities while enabling the organization to move quickly and securely. On Day 1, you’ll step into leadership of an experienced and globally distributed Threat Management organization. Your priority will be to listen and learn—understanding the people, operational rhythms, team dynamics, current capabilities, and areas of opportunity across SOC operations, detection engineering, exposure management, and insider risk. You’ll spend time building trust with managers, technical leaders, and key stakeholders while assessing the current state of operations, tooling, processes, and strategic priorities. Success in this role starts with partnership, thoughtful leadership, and clarity of direction—not sweeping change for the sake of change.

Responsibilities

• Strategic Leadership: Define and execute the long-term Threat Management strategy and roadmap aligned to enterprise risk priorities, evolving threats, and business objectives.
• Operational Excellence: Lead and mature global Threat Management operations, including SOC, incident response, detection engineering, exposure management, insider risk, and threat intelligence capabilities.
• Transformation & Innovation: Drive modernization initiatives focused on AI, automation, detection engineering, threat hunting, and scalable security operations.
• Culture: Foster a culture of collaboration, accountability, inclusion, innovation, and continuous learning across global teams.
• Building Leaders: Develop managers and technical leaders into strong, empowered leaders capable of building high‑performing global teams.
• Driving Outcomes: Establish measurable operational goals, maturity metrics, KRIs, and KCIs while ensuring accountability and continuous improvement across teams.
• Executive Partnership: Serve as a trusted advisor to executives and business leaders by translating cyber risk into meaningful business impact and operational readiness insights.
• Financial Stewardship: Support budget planning, vendor strategy, and investment prioritization to ensure Threat Management capabilities scale effectively and sustainably.

Typical Week

• Spend at least four days in the office engaging directly with leaders, analysts, engineers, and stakeholders to drive alignment and operational momentum.
• Meet with managers and technical leaders to review incidents, operational performance, staffing needs, roadmap progress, and strategic initiatives.
• Partner with infrastructure, engineering, legal, HR, compliance, and business leadership to coordinate priorities and improve enterprise‑wide security readiness.
• Review major incidents, emerging threats, geopolitical risks, and operational trends while helping teams navigate high‑pressure situations effectively.
• Coaching leaders in communication, decision‑making, operational maturity, and team development strategies.
• Drive discussions around automation, AI capabilities, threat detection improvements, and long‑term operational transformation initiatives.
• Participate in executive and cross‑functional meetings to communicate risk, operational readiness, and Threat Management priorities.
• Review vendor strategy, technology investments, staffing models, and budget priorities to ensure alignment with long‑term operational goals.

This job might be for you if

• You’re culture‑driven – you believe strong security teams are built through inclusion, mentorship, accountability, and continuous learning.
• You’re collaborative – you know the best security outcomes come from strong partnerships across business and technology teams.
• You’re calm under pressure – during incidents or crisis situations, people look to you for clarity, direction, and steady leadership.
• You’re approachable – whether working with analysts, engineers, executives, or business stakeholders, people trust your authenticity and communication style.
• You’re operationally minded – you thrive in fast‑moving environments and can balance strategic thinking with strong operational execution.
• You’re a leader of leaders – you enjoy building managers and technical leaders into confident, capable leaders who empower their teams to succeed.
• You’re transformation‑focused – you’re energized by modernizing security operations through AI, automation, and scalable processes.
• You’re strategically curious – you think beyond today’s threats and focus on how to evolve organizations for the future.

Qualifications

Required qualifications

• 12+ years of experience across cybersecurity and related enterprise technology domains.
• 7+ years of experience leading global security operations, Threat Management, or related security functions.
• Demonstrated leadership experience across one or more of the following areas: SOC operations, incident response, detection engineering, threat intelligence, exposure management, insider risk, or security automation.
• Experience leading operational transformation initiatives focused on modernization, scalability, automation, or AI adoption.
• Strong understanding of cloud security, endpoint security, identity security, networking, and enterprise infrastructure environments.
• Experience managing high‑pressure operational environments, crisis response, and enterprise‑wide incident coordination.
• Proven ability to influence executives, communicate risk effectively, and lead cross‑functional initiatives.
• Experience building strategic roadmaps, operational maturity programs, and measurable performance outcomes.
• Experience leading and developing geographically distributed teams.

Preferred qualifications

• Bachelor’s or master’s degree in information security, Computer Science, Engineering, or related fields. Equivalent experience and non‑traditional paths are welcomed.
• Industry certifications such as CISSP, CISM, GIAC, GCIA, GCIH, or related security certifications.
• Experience within highly regulated industries and/or financial services environments.
• Experience implementing AI‑driven security operations or advanced automation capabilities within Threat Management programs.
• Experience representing organizations externally through industry engagement, conferences, or thought leadership initiatives.