Information Security Operations Manager

AllianceBernstein; Nashville (TN); Hybrid; USD 140,000 - 190,000; Full time

Job summary

AllianceBernstein seeks an Information Security Operations Manager to lead the Security Analyst Team at the Nashville headquarters, four days in-office and one day remote weekly. This is not an entry-level role and reports to the Director of Information Security Risk and Operations.

You will oversee incident response, threat detection, and hands-on escalation, while driving security metrics, vendor management, and risk-based decisions in a hybrid environment.

Qualifications

• Bachelor's degree in CS/IS/InfoSec or equivalent experience.
• 8+ years in information security and/or IT operations.
• 6+ years in incident response leadership.
• Experience managing or leading security teams.
• Willingness to participate in 24/7 on-call rotation.
• Experience building and maintaining SOAR playbooks.
• Fluent with SPL, KQL, and YARA-L or similar.
• Experience with SIEM platforms, including Splunk/Microsoft Sentinel.
• Experience with hybrid on-prem and cloud environments.
• Strong communication and leadership skills.

Responsibilities

• Lead daily operations of the information security program, aligning with risk tolerance.
• Develop, implement, and improve security procedures.
• Participate in incident response and threat detection as a hands-on escalation point.
• Track and report key security metrics to leadership.
• Collaborate with IT, legal, compliance, privacy, and executives for risk management.
• Leverage automation and threat intel to enhance security operations.
• Manage vendor relationships.
• Coach and mentor analysts in incident handling, threat hunting, and query development.

Skills

Incident response

Leadership

Threat hunting

SIEM experience

Scripting/queries

On-call leadership

Cross-functional collaboration

Security metrics reporting

Regulatory awareness

Hybrid/cloud security

Communication skills

Education

Bachelor's degree in Computer Science, Information Systems, or Information Security

Equivalent experience considered

Tools

JIRA

ServiceNow

Splunk SPL

Kusto Query Language (KQL)

SOAR playbooks

DLP platforms

Job description

Who You'll Work With

We are seeking an Information Security Operations Manager to lead our Information Security Analyst Team in Global Technology & Operations. This role is based at our Nashville, TN headquarters, four days in the office and one day remote each week. This is not an entry-level position.

The Information Security Operations team is responsible for safeguarding AllianceBernstein's technology and information assets. The team's primary focus is on identifying threats, monitoring, and responding to security events and enhancing the firm's security posture. The Information Security Operations team operates as part of Infrastructure Risk Management (IRM), a department within Global Technology and Operations that is responsible for an enterprise-wide integrated infrastructure risk management program which employs a holistic approach to manage cybersecurity, information security, data privacy, physical security and business continuity led by the Chief Security Officer. This role reports to the Director of Information Security Risk and Operations.

What You'll Do

• Lead the daily operations of the information security operations program, aligning business objectives and risk tolerance.
• Develop, implement, and continuously improve security procedures.
• Actively participate in incident response and threat detection alongside the team, serving as a hands‑on escalation point and ensuring rapid and effective resolution.
• Track and report on key security metrics (e.g., MTTD, MTTR) to leadership.
• Collaborate with IT, legal, compliance, privacy, and executive teams for holistic risk management.
• Leverage automation and threat intelligence to enhance security operations.
• Manage vendor relationships.
• Coach and mentor analysts through hands‑on support, including real‑time incident handling, threat hunting, and query development.

What We're Looking For

• Ideally 8+ years’ experience in Information Security and/or Information Technology in an operations role
• Minimum of 6 years prior experience in a role exclusively responsible for information security incident response
• Prior experience managing or leading people on an information security team
• Experience leading incident response in a global environment, including hands‑on triage, investigation, and containment alongside the team
• Willingness to participate in the 24/7/365 on‑call rotation alongside the team. This is a hands‑on manager position.
• Experience building and maintaining SOAR playbooks.
• Fluency with Splunk Processing Language [SPL], YARA‑L, and Kusto Query Language [KQL]
• Experience working with JIRA, ServiceNow or similar platforms
• Experience working with DLP platforms
• Experience creating, collecting, and assembling metrics for reporting
• Experience working with hybrid (on‑prem and Cloud) technology platforms and applications
• Extensive experience securing and/or troubleshooting computer systems and networks
• Extensive experience with Malware Assessment and Incident Response
• Experience with SIEM platforms; Splunk and Microsoft Sentinel experience preferred
• Experience reviewing logs, scripting tasks or creating structured queries/regex searches
• Solid understanding of AI, its associated risks, and security use cases
• Awareness of Information Security best practices and financial regulatory requirements
• Excellent problem‑solving and risk decision‑making skills
• Excellent verbal and written communication skills; ability to communicate clearly to several levels of management while catering communication style to a wide range of technical, business, and cultural backgrounds across various business units
• Ability to represent data in the most meaningful form
• Ability to think and operate independently with limited guidance
• Bachelor’s degree in Computer Science, Information Systems, or Information Security (equivalent experience may be considered)
• CISSP, CISM, OSCP, CRISC, GSEC, GCIH, GCIA, GCFA, GFCE, GSE are preferred but not required (other advanced certifications considered)
• Excellent program/project management, prioritization, and organizational skills
• Acute attention to detail and solid leadership abilities, with a genuine desire to lead by example and stay close to the work

Nashville, Tennessee