Cybersecurity Operations Leader

Spencer Fane LLP; Washington (District of Columbia); On-site; USD 185,000 - 210,000; Full time

Job summary

Spencer Fane LLP seeks a Cybersecurity Manager to lead daily security operations, incident response, and security architecture across the firm. You will supervise security staff and external providers, align security controls with business needs, and drive initiatives to protect systems and data in a professional services environment.

The role focuses on resilience, platform health, and measurable security outcomes, partnering with IT and business teams to embed security into technology

Qualifications

• Bachelor's degree in cybersecurity or related field, or five+ years of equivalent experience in a large organization.
• Eight years of IT/cybersecurity experience with at least three years in enterprise security operations and management.
• At least three years supervising cybersecurity staff and managing MSSPs/vendors.

Responsibilities

• Lead daily cybersecurity operations, set priorities, manage escalations, and ensure service delivery.
• Oversee incident response planning, containment, and post-incident improvements with cross‑functional coordination.
• Drive security engineering and architecture reviews across network, identity, cloud, data, and AI.
• Maintain accountability for security platforms, detections, and remediation activities.
• Manage cybersecurity initiatives from design through implementation, testing, and transition.

Skills

Security Architecture

Security Operations

Incident Response

Vulnerability Management

Vendor Management

Project Delivery

Security Leadership

GRC & Audit

Education

Bachelor's degree in cybersecurity

Tools

Microsoft security technologies

Palo Alto Networks

CrowdStrike

Job description

Spencer Fane LLP seeks a Cybersecurity Manager to lead daily security operations, incident response, and security architecture across the firm. You will supervise security staff and external providers, align security controls with business needs, and drive initiatives to protect systems and data in a professional services environment.

The role focuses on resilience, platform health, and measurable security outcomes, partnering with IT and business teams to embed security into technology