Information Security (InfoSec) Operations Manager

Kamis; Dallas (TX); A distancia; USD 140.000 - 200.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical insurance

Vision insurance

Dental insurance

401(k)

Tuition assistance

Descripción de la vacante

Intuit, Inc. is seeking an experienced Security Operations Manager to lead and continuously improve the security operations program for an established law firm (AmLaw 200).

The role oversees threat monitoring, incident response, vulnerability management, and operational risk reporting to protect enterprise systems and confidential client information. Reporting to the Director of Information Security, you will lead security personnel and external service providers while partnering with IT, Legal,

Formación

• Bachelor’s degree in cybersecurity, information technology, computer science, or a related field.
• 10+ years of progressive information security experience, including at least five years leading security operations, incident response, security engineering, or a comparable function.
• Experience leading personnel and managing external security providers and enterprise security technologies.
• Familiarity with NIST, ISO 27001/27002, CIS Controls, and MITRE ATT&CK frameworks.
• CISSP, CISM, GIAC, Security+ or another relevant security certification preferred.

Responsabilidades

• Lead security operations, including threat monitoring, detection, incident investigation and response, containment, recovery, and post-incident reviews.
• Maintain incident response plans, playbooks, escalation procedures, and readiness for high-severity security events.
• Oversee vulnerability management, including risk-based prioritization, remediation tracking, exception management, and reporting.
• Manage and optimize enterprise security technologies, including SIEM, SOAR, EDR/XDR, email security, identity protection, network security, cloud security, and data protection solutions.
• Develop operational dashboards and executive reporting covering incident trends, response effectiveness, vulnerability exposure, control performance, and emerging risks.
• Lead security awareness initiatives, including training, phishing simulations, and targeted education.
• Coordinate security testing, tabletop exercises, audits, client security inquiries, and risk assessments.
• Manage security staff, contractors, and managed security service providers, including performance, service delivery, budgeting, licensing, and resource planning.
• Provide security guidance on technology initiatives, architecture, integrations, vendor services, and significant changes.

Conocimientos

Security leadership

Incident response

Threat detection

Vulnerability management

Communication

Project management

Vendor management

Risk-based decision making

Security controls

Educación

Bachelor’s degree in cybersecurity, information technology, or computer science

Herramientas

SIEM

SOAR

EDR/XDR

Identity and access management

Cloud security tools

Vulnerability management tools

Descripción del empleo

We are seeking an experienced Security Operations Manager to lead and continuously improve the security operations program for an established law firm (AmLaw 200). This individual will oversee security monitoring, incident response, vulnerability management, security technologies, and operational risk reporting to help protect enterprise systems, personnel, and highly confidential client information.

Reporting to the Director of Information Security, the Security Operations Manager will lead security personnel and external service providers while partnering with IT, Legal, Privacy, Risk Management, and business leadership. The ideal candidate combines strong technical knowledge with proven leadership skills, sound judgment, and the ability to communicate security risks effectively to both technical and executive audiences.

Key Responsibilities

• Lead security operations, including threat monitoring, detection, incident investigation and response, containment, recovery, and post-incident reviews.
• Maintain incident response plans, playbooks, escalation procedures, and readiness for high-severity security events.
• Oversee vulnerability management, including risk-based prioritization, remediation tracking, exception management, and reporting.
• Manage and optimize enterprise security technologies, including SIEM, SOAR, EDR/XDR, email security, identity protection, network security, cloud security, and data protection solutions.
• Develop operational dashboards and executive reporting covering incident trends, response effectiveness, vulnerability exposure, control performance, and emerging risks.
• Lead security awareness initiatives, including training, phishing simulations, and targeted education.
• Coordinate security testing, tabletop exercises, audits, client security inquiries, and risk assessments.
• Manage security staff, contractors, and managed security service providers, including performance, service delivery, budgeting, licensing, and resource planning.
• Provide security guidance on technology initiatives, architecture, integrations, vendor services, and significant changes.

Qualifications

• Bachelor’s degree in cybersecurity, information technology, computer science, or a related field, or an equivalent combination of education and experience.
• 10+ years of progressive information security experience, including at least five years leading security operations, incident response, security engineering, or a comparable function.
• Demonstrated experience leading personnel and managing external security providers and enterprise security technologies.
• Strong knowledge of incident response, threat detection, vulnerability management, security controls, and common attacker techniques.
• Hands-on understanding of SIEM, SOAR, EDR/XDR, identity and access management, network security, cloud security, and vulnerability management tools.
• Familiarity with NIST, ISO 27001/27002, CIS Controls, and MITRE ATT&CK frameworks.
• Experience developing operational metrics, procedures, and executive-level risk communications.
• Strong communication, project management, vendor management, and risk-based decision-making skills.
• CISSP, CISM, GIAC, Security+, or another relevant security certification preferred.

Preferred Experience

Experience in a law firm, professional services organization, or regulated environment with demanding client confidentiality, privacy, and security obligations is highly desirable.

Work Arrangement

This is a remote position requiring candidates to reside in the Dallas metropolitan area. Periodic travel to a firm office or other locations is required for meetings, training, incident response, and business needs. Evening or weekend availability may be required for significant incidents, maintenance, or other operational needs.

Featured benefits

• Medical insurance
• Vision insurance
• Dental insurance
• 401(k)
• Tuition assistance

Requirements added by the job poster

• 7+ years of work experience with IT Security Operations
• 1+ years of Law Practice experience