Information Security (InfoSec) Operations Manager

Cybersecurity Jobs; Dallas (TX); Remote; USD 175,000 - 180,000; Full time

Benefits offered by this job

Medical insurance

Vision insurance

Dental insurance

401(k)

Tuition assistance

Job summary

Cybersecurity Jobs in Dallas area seeks an experienced Information Security Operations Leader for a top law firm. You will direct day-to-day security monitoring, incident response, vulnerability management, and operational risk reporting while guiding security personnel and external providers.

The role emphasizes developing executive dashboards, incident response readiness, and risk communication, with remote work capability in the Dallas area and periodic travel for meetings and training.

Qualifications

• Bachelor’s degree in cybersecurity, information technology, computer science, or related field or equivalent.
• 10+ years in information security with 5+ years in leadership of security operations or incident response.
• Proven track record managing personnel and external providers and enterprise tech.
• Strong knowledge of incident response, threat detection, vulnerability management, and controls.
• Hands-on with SIEM, SOAR, EDR/XDR, IAM, network/cloud security tools.
• Familiarity with NIST, ISO 27001/27002, CIS Controls, MITRE ATT&CK.
• Experience creating operational metrics and executive risk reporting.
• Excellent communication, project and vendor management, risk-based decisions.
• Certifications: CISSP, CISM, GIAC, Security+ preferred.
• 7+ years IT Security Operations; 1+ years Law Practice experience.

Responsibilities

• Direct security operations including threat monitoring, detection, investigation and response.
• Maintain incident response plans and readiness processes for high-severity events.
• Oversee vulnerability management with risk-based prioritization and reporting.
• Manage and optimize SIEM, SOAR, EDR/XDR, email security, identity protection and cloud security.
• Create dashboards and executive risk reports on incidents, vulnerabilities, and controls.
• Lead security awareness activities, training, simulations, and education efforts.
• Coordinate testing, tabletop exercises, audits, client inquiries, and risk assessments.
• Manage security staff, contractors, and MSSPs with budgeting and performance oversight.
• Provide security guidance for technology initiatives, architecture and vendor services.

Skills

Security operations leadership

Incident response management

Vulnerability management

SIEM/SOAR/EDR expertise

IAM and access control

Security governance & metrics

Education

Bachelor’s degree in cybersecurity or related field

Tools

SIEM platforms

SOAR tools

EDR/XDR solutions

Cloud security tooling

Job description

This role leads an information security operations program for an established law firm (AmLaw 200), with responsibility for day-to-day security monitoring, incident response execution, vulnerability management, and operational risk reporting. The position includes managing security personnel and external providers while continuously improving operational processes and security technology performance.

Key Responsibilities

• Direct security operations, including threat monitoring, detection, incident investigation and response, containment, recovery, and post-incident reviews.
• Maintain incident response plans, playbooks, escalation procedures, and readiness processes for high-severity security events.
• Oversee vulnerability management with risk-based prioritization, remediation tracking, exception handling, and reporting.
• Manage and optimize enterprise security technologies, including SIEM, SOAR, EDR/XDR, email security, identity protection, network security, cloud security, and data protection solutions.
• Create operational dashboards and executive reporting covering incident trends, response effectiveness, vulnerability exposure, control performance, and emerging risks.
• Lead security awareness activities, including training, phishing simulations, and targeted education efforts.
• Coordinate security testing, tabletop exercises, audits, client security inquiries, and risk assessments.
• Manage security staff, contractors, and managed security service providers, including performance oversight, service delivery, budgeting, licensing, and resource planning.
• Provide security guidance for technology initiatives, architecture decisions, integrations, vendor services, and significant changes.

Required Qualifications

• Bachelor’s degree in cybersecurity, information technology, computer science, or a related field, or an equivalent combination of education and experience.
• 10+ years of progressive information security experience, including at least five years leading security operations, incident response, security engineering, or a comparable function.
• Proven experience leading personnel and managing external security providers and enterprise security technologies.
• Strong knowledge of incident response, threat detection, vulnerability management, security controls, and common attacker techniques.
• Hands-on understanding of SIEM, SOAR, EDR/XDR, identity and access management, network security, cloud security, and vulnerability management tools.
• Familiarity with NIST, ISO 27001/27002, CIS Controls, and MITRE ATT&CK frameworks.
• Experience developing operational metrics, procedures, and executive-level risk communication.
• Strong communication, project management, vendor management, and risk-based decision-making skills.
• CISSP, CISM, GIAC, Security+, or another relevant security certification preferred.
• 7+ years of work experience with IT Security Operations.
• 1+ years of Law Practice experience.

Technologies

• SIEM, SOAR, EDR/XDR
• Email security, identity protection, identity and access management
• Network security, cloud security, data protection solutions
• NIST, ISO 27001/27002, CIS Controls, MITRE ATT&CK
• CISSP, CISM, GIAC, Security+

Benefits

• Medical insurance
• Vision insurance
• Dental insurance
• 401(k)
• Tuition assistance

Work Arrangement

• Remote position requiring candidates to reside in the Dallas metropolitan area.
• Periodic travel to a firm office or other locations is required for meetings, training, incident response, and business needs.
• Evening or weekend availability may be required for significant incidents, maintenance, or other operational needs.

Preferred Experience

Experience in a law firm, professional services organization, or regulated environment is highly desirable, particularly where client confidentiality, privacy, and security obligations are demanding.

Compensation

USD 175,000 - 180,000 per year.