Information Security Operations Lead

Top Prospect Group; Connecticut; On-site; USD 130,000 - 155,000; Full time

Job summary

Top Prospect Group seeks an Information Security Operations Specialist to lead and mature its cybersecurity program with executive visibility and strategic influence.

Onsite in Connecticut, you will drive RMF risk management, conduct assessments and tests, manage audits, and coordinate vendor security.

This individual contributor role requires strong communication, hands-on security work, and the ability to elevate the enterprise security posture.

Qualifications

• Strong experience in information security operations within regulated environments.
• Expertise in RMF, risk management, vulnerability management, and incident response.
• Experience leading audits, regulatory compliance, and third‑party security reviews.
• Knowledge of cybersecurity threats, tools, technologies, and best practices.
• Proven leadership with cross-functional collaboration and executive communication.

Responsibilities

• Lead enterprise-wide cybersecurity initiatives and security operations.
• Oversee audits, assessments, and testing of the cybersecurity environment.
• Manage security project planning, budgeting, documentation, and vendor coordination.
• Establish and enforce security policies, procedures, and technical controls across networks, systems, and applications.
• Conduct risk assessments, vulnerability scans, penetration testing, and fraud investigations.
• Lead incident response efforts, including threat detection, investigation, containment, and recovery.
• Develop and maintain incident response plans and forensic processes.
• Ensure compliance with regulatory and government cybersecurity standards.
• Oversee third-party/vendor security assessments and risk management processes.
• Develop and manage security awareness programs for employees and stakeholders.
• Provide reporting and updates to executive leadership and the board on cybersecurity posture and compliance.

Skills

Security governance

RMF

Incident response

Audits & compliance

Executive communication

Vendor management

Job description

Ready to own and evolve a cybersecurity program ? This role offers executive visibility, strategic influence, and the opportunity to strengthen enterprise security from the ground up.

FT

Onsite in CT

130-155K

Risk management, RMF, risk assessments, vulnerability assessments and scans, and penetration tests, leadership and hands-on. Small team

We are seeking an Information Security Operations Specialist to lead and strengthen its cybersecurity program. This leadership role is responsible for overseeing security operations, risk management, incident response, regulatory compliance, and vendor security to ensure a resilient and secure enterprise environment. This is an individual contributor role that will be a combination of leadership and being hands-on.

Key Responsibilities

• Lead execution of enterprise-wide cybersecurity initiatives and security operations
• Oversee audits, assessments, and testing of the cybersecurity environment
• Manage security project planning, budgeting, documentation, and vendor coordination
• Establish and enforce security policies, procedures, and technical controls across networks, systems, and applications
• Conduct risk assessments, vulnerability scans, penetration testing, and fraud investigations
• Lead incident response efforts, including threat detection, investigation, containment, and recovery
• Develop and maintain incident response plans and forensic processes
• Ensure compliance with regulatory and government cybersecurity standards
• Oversee third-party/vendor security assessments and risk management processes
• Develop and manage security awareness programs for employees and stakeholders
• Provide reporting and updates to executive leadership and the board on cybersecurity posture and compliance

Qualifications

• Strong experience in information security operations within a regulated environment (financial services preferred)
• Expertise in risk management frameworks (RMF), vulnerability management, and incident response
• Experience managing audits, regulatory compliance, and third-party security reviews
• Knowledge of current cybersecurity threats, tools, technologies, and best practices
• Proven leadership skills with the ability to collaborate cross-functionally and influence stakeholders
• Strong analytical, documentation, and executive-level communication skills