Cybersecurity Manager

Simmons Bank; Little Rock (AR); On-site; USD 120,000 - 180,000; Full time

Job summary

Simmons Bank in Little Rock, Arkansas is seeking a Cybersecurity Manager to lead the Security Operations Center and drive incident response, threat tracking, and security education.

This role oversees SOC analysts, develops playbooks, coordinates with IT and business units, and ensures audits and risk assessments are supported. A strong background in SIEM, vulnerability management, and regulatory compliance is required.

Qualifications

• Five years of information security or cybersecurity experience.
• Three years supervising security operations personnel.
• Banking or Financial Services experience preferred.
• Experience with SIEM/log aggregation and threat hunting.

Responsibilities

• Develop and maintain the SOC program and lead SOC analysts.
• Oversee incident response plans and playbooks; act as Incident Commander.
• Manage vulnerability management, risk analyses, and threat intelligence programs.
• Support audits, regulatory requests, and risk assessments related to SOC.

Job description

It's fun to work in a company where people truly BELIEVE in what they're doing! We're committed to bringing passion and customer focus to the business. Summary At Simmons Bank, the Cybersecurity Manager is an essential leader within the Information Security team. The SOC provides continuous security monitoring and incident response; conducts security awareness and training; and manages security threats and vulnerabilities. The Cybersecurity Manager oversees the activity of the SOC team, including hiring, training, and performance management. The Cybersecurity Manager also maintains strong operational programs; assesses escalated security events and threats; and develops, implements and tests incident response plans and playbooks. Additional responsibilities include supporting the Bank’s audits and examinations; supporting risk assessments related to the SOC; reporting the SOC’s operational metrics, and reporting on SOC activities to IT and business leaders.

Essential Duties and Responsibilities

Security Operations

• Develop and maintain the Security Operations Center (SOC) Program
• Direct a team of SOC analysts, delegating tasks as required to support daily cyber security detection and response activities
• Develop and maintain processes to enhance detection and response capabilities
• Develop use-cases and content for security event monitoring and automated workflows
• Monitor SOC analyst performance against defined SLAs and metrics
• Coordinate with Red Team and external service providers to scope and execute security assessments

Incident Response

• Develop, implement, and test incident response plans with SOC, IT and business units
• Oversee the development of written SOC response playbooks
• Manage the incident response process serving as Incident Commander for declared cybersecurity incidents
• Manage an insider threat program, including data loss prevention
• Oversee SOC analysts’ response to DLP alerts and escalations
• Serve as security liaison for Fraud and Compliance investigations
• Serve as quality control and security liaison for legal collections

Security Education

• Oversee security awareness and training program, including content selection and development
• Oversee security awareness phishing simulations and tabletop exercises
• Provide guidance, education, and content to other departments and business units on cyber related matters as well as communicating capabilities of the SOC team

Threat and Vulnerability Management

• Lead and manage the vulnerability management process
• Support application security scanning and vulnerability risk analysis
• Manage threat hunting and threat intelligence programs
• Manage program to protect digital assets from abuse and takedown process
• Oversee the analysis of vendor vulnerability releases (e.g. Patch Tuesday)
• Research new trends and advances in cybersecurity to stay updated on potential threats and best practices
• Advise business and technology leadership for potential changes in security posture
• Recommend and direct changes in automated tools supporting the monitoring and threat landscape

Administrative

• Develop written standards for respective areas and contributes to the overall Information Security Policy and Program
• Responds to audit, compliance, and regulatory requests, as needed (e.g. SOX audit)
• Participate in periodic business reviews with vendors and internal customers
• Manage staffing, including supervision, scheduling, development, evaluation, and disciplinary actions
• Develop and maintain an environment of growth where knowledge and performance are consistently advancing
• Develop and mentor staff through open communication and training opportunities; build and maintain employee morale and motivation

Qualifications

Work Experience

• Five (5) years of experience in information security or cybersecurity
• Three (3) years of experience supervising and leading security operations personnel
• Banking or Financial Services experienced (preferred)
• Experience within Security Operations Center, Fusion Center, or MSP/MSSP (preferred)
• Experience with vulnerability management process, scanning tools, risk analysis and metrics reporting
• Experience investigating intrusions in a cloud/hybrid environment
• Experience with SIEM and/or log aggregation technologies, writing queries to support investigations and threat hunts
• Experience with security tool integrations (APIs) and automating processes with scripting and SOAR (preferred)
• Experience leading incident response activities at an appropriate level in prior roles

Education and Certifications

• CISSP, CISM, GCIH, GSOC or other security related certifications (required)
• Multiple certifications across security disciplines (preferred)
• Bachelor’s or Master’s degree in a related field (preferred)

Other Qualifications (including physical requirements)

• Ability to balance multiple responsibilities and prioritize effectively
• Strong sense of urgency and focus on timely execution of deliverables
• Strong operational mindset and high degree of accountability
• Strong situational awareness and proactive, concise communicator
• Proficient with the MITRE attack framework and common threat vectors
• Proficient with security of Windows operating systems
• Strong oral and written communication skills
• Strong organizational, problem solving, and planning skills
• Must possess excellent telephone and customer service skills
• Must be willing to periodically work non-standard hours and be on call

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Activities, duties and responsibilities may change at any time with or without notice.

Equal Employment Opportunity Information

Simmons First National Corporation and its subsidiaries are committed to a policy of equal employment with respect to a person's race, color, religion, sex, ancestry, sexual orientation, gender identity, national origin, covered veterans, military status, physical or mental disability or any other legally protected classifications.

Since 1903, we’ve been putting people first by making a commitment to you. Simmons Bank is the subsidiary bank for Simmons First National Corporation (NASDAQ: SFNC), a publicly traded bank holding company headquartered in Arkansas. Founded as a community bank, Simmons Bank has grown steadily to its current size of $28 billion in assets, with more than 3,000 associates located in Arkansas, Kansas, Missouri, Oklahoma, Tennessee and Texas. Our growth has led to some amazing career opportunities, while our dynamic culture has been recognized by publications across our footprint. Parallel to our growth, Simmons Bank’s community roots run deep – these are felt in the ways we seek to go the extra mile for our customers and communities through exceptional service and volunteerism, and in the strong career growth opportunities and wellness programs we offer associates. Our team is characterized by collaboration, integrity and passion for all we do, high performance, and a commitment to personal and professional growth.

If these cornerstones of company culture appeal to you, let’s talk! There’s never been a better time to join our team.