Information Security Operations Manager

Stuller, Inc.; Lafayette (LA); On-site; USD 140,000 - 190,000; Full time

Job summary

Stuller, Inc. in Lafayette, LA is seeking an Information Security Operations Manager to lead the Security Operations team and the company’s security program. You will define strategy, oversee risk and compliance, and guide incident response while partnering with IT and business units.

You will mentor security analysts and engineers, manage budgets and vendors, and ensure security is embedded in infrastructure, cloud, and development projects across the organization.

Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or equivalent experience.
• 7+ years information security experience, including 5+ years in a leadership role.
• Experience maturing an enterprise information security program.
• Knowledge of PCI-DSS and NIST CSF.
• Experience leading incident response and coordinating with stakeholders.
• Ability to communicate risks to executives.
• Experience managing budgets and vendors.

Responsibilities

• Develop and execute information security strategy, roadmap, and governance aligned with CSF and PCI-DSS.
• Lead, mentor, and develop security analysts and engineers.
• Own the incident response program including major incident coordination and post-incident reviews.
• Oversee security ops: threat detection, monitoring, vulnerability mgmt, threat hunting, MSSP partnerships.
• Manage enterprise cyber risk, security policies, vendor assessments, and third-party risk reviews.
• Lead PCI-DSS compliance efforts, audits, remediation, and auditor interactions.
• Partner with IT and business teams to integrate security into infrastructure, cloud, application development, and projects.
• Manage security budgets, vendor relationships, contracts, and investments.
• Establish security metrics and reporting for leadership.

Skills

Security leadership

NIST CSF

PCI-DSS

SIEM

EDR/XDR

Cloud security

Vendor management

Budget management

Executive communication

Education

Bachelor's degree in Cybersecurity/Information Systems/CS

Master's degree (preferred)

Tools

SIEM systems

EDR/XDR tools

Identity management

Cloud security platforms

Security testing tools

Job description

• Location 302 Rue Louis XIV,Lafayette, LA, 70508,United States
• Job Category Information Technology, Full-Time
• Manage Others Yes

Description

With constant innovation, cutting-edge technology, and fast-paced development, Stuller is seeking an experienced security leader to join our Information Technology team.

The Security Operations team protects the systems, data, and services that enable Stuller to deliver an exceptional customer experience. Through continuous monitoring, threat detection, incident response, risk management, and compliance oversight, the team helps safeguard business operations while supporting growth and innovation.

As the Information Security Operations Manager, you will lead Stuller's information security program and Security Operations team. You will establish security strategy, oversee cyber risk and compliance initiatives, guide incident response efforts, and partner across the organization to build security into everything we do. This role serves as the senior security leader for the company, providing technical and strategic guidance to leadership while ensuring security supports business objectives.

Key Responsibilities

• Develop and execute Stuller's information security strategy, roadmap, and governance program aligned with business objectives, NIST Cybersecurity Framework (CSF), and PCI-DSS requirements.
• Lead, mentor, and develop a team of security analysts and engineers while fostering a culture of accountability, collaboration, and continuous improvement.
• Own the incident response program, including major incident coordination, post-incident reviews, and ongoing readiness through tabletop exercises and security testing.
• Oversee security operations, including threat detection, monitoring, vulnerability management, threat hunting, and managed security service providers.
• Manage enterprise cyber risk, security policies, standards, vendor assessments, and third-party risk reviews.
• Lead PCI-DSS compliance efforts, audit readiness activities, remediation planning, and interactions with internal and external auditors.
• Partner with IT and business teams to integrate security into infrastructure, cloud, application development, and project initiatives.
• Manage security budgets, vendor relationships, contracts, and technology investments.
• Establish security metrics and reporting that communicate risk, program effectiveness, and business impact to leadership.
• Support business continuity, disaster recovery, and organizational resilience initiatives.

Basic Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or a related field, or equivalent combination of education and experience.
• 7+ years of information security experience, including 5+ years in a leadership role.
• Experience developing, managing, or maturing an enterprise information security program.
• Strong knowledge of security frameworks, risk management practices, and compliance requirements, including PCI-DSS and NIST CSF.
• Experience leading security incident response efforts and coordinating with internal stakeholders and third-party partners.
• Demonstrated ability to communicate technical risks and recommendations to executive leadership.
• Experience managing security budgets, vendors, and managed security service providers.
• Working knowledge of SIEM, EDR/XDR, identity management, network security, cloud security, and security operations processes.
• Understanding of modern cyber threats, attack techniques, and mitigation strategies.
• Strong leadership, decision-making, and communication skills with the ability to perform effectively during high-pressure situations.

Preferred Qualifications

• Master's degree in Cybersecurity, Information Assurance, Computer Science, Business Administration, or a related field.
• Professional certifications such as CISSP, CISM, CISA, CRISC, GCIH, GCIA, or similar credentials.
• Experience leading SOC transformations, implementing managed detection and response (MDR) programs, or supporting large-scale cloud initiatives.
• Familiarity with security automation, detection engineering, threat intelligence, and scripting technologies such as Python or PowerShell.
• Experience overseeing penetration testing, red/purple team exercises, security awareness programs, and executive tabletop exercises.
• Experience within highly regulated environments or organizations with mature compliance requirements.

This position requires candidates to have unrestricted work authorization in the United States without the need for visa sponsorship, either currently or in the future.

Summary

Stuller is the jewelry industry's largest manufacturer, supplier, and technology developer in North America. With a customer base spanning the globe, we serve jewelry professionals through an unmatched selection of quality products, expert and friendly service, and the fastest delivery. We are powered by our employees, their creativity, their energy, and their commitment to creating exceptional experiences.

We are committed to our employees' comprehensive health and happiness. Our award-winning wellness initiatives and benefits help Stuller to stand out as one of the top employers in Louisiana. Learn more about our benefits by clicking here .

Additional Information