Information Security Operations Manager

abglobal; Nashville (TN); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work schedule

Job summary

AllianceBernstein in Nashville, TN is seeking an Information Security Operations Manager to lead a 24/7/365 incident response team from our headquarters. The role combines hands-on leadership with strategic risk management and collaboration across IT, legal, compliance, and privacy groups.

You will guide analysts, develop playbooks, and drive security improvements while maintaining operational excellence in a hybrid work setting with regular onsite presence in Nashville.

Qualifications

• 8+ years in Information Security/IT in an operations role.
• 6+ years in a role exclusively responsible for information security incident response.
• Experience leading people on an information security team.
• Hands-on incident response in a global environment: triage, investigation, containment.
• Willingness to participate in 24/7/365 on-call rotation; hands-on manager role.

Responsibilities

• Lead the daily operations of the information security operations program, aligning business objectives and risk tolerance.
• Develop, implement, and improve security procedures.
• Actively participate in incident response and threat detection; serve as escalation point.
• Track and report on security metrics to leadership.
• Collaborate with IT, legal, compliance, privacy, and executive teams for holistic risk management.

Skills

People leadership

Problem solving

Communication

Incident response

Education

Bachelor's degree in CS/IS/InfoSec

Tools

Splunk

Microsoft Sentinel

JIRA

ServiceNow

SOAR playbooks

Job description

Who You’ll Work With:

We are seeking an Information Security Operations Manager to lead our Information Security Analyst Team in Global Technology & Operations. This role is based at our Nashville, TN headquarters, four days in the office and one day remote each week. This is not an entry-level position.

The Information Security Operations team is responsible for safeguarding AllianceBernstein's technology and information assets. The team's primary focus is on identifying threats, monitoring, and responding to security events and enhancing the firm's security posture. The Information Security Operations team operates as part of Infrastructure Risk Management (IRM), a department within Global Technology and Operations that is responsible for an enterprise-wide integrated infrastructure risk management program which employs a holistic approach to manage cybersecurity, information security, data privacy, physical security and business continuity led by the Chief Security Officer. This role reports to the Director of Information Security Risk and Operations.

What You’ll Do:

As the Information Security Operations Manager, you will perform a critical role working side by side with information security analysts as a hands-on player/coach, providing guidance, coaching, and training. You will also collaborate with other corporate business units including but not limited to global enterprise infrastructure and technology, corporate compliance, security assurance, global technology operations and other infrastructure risk business units. This position leads a team that provides information security analysis services, incident response services, and ultimately information risk management support to the business. Specifically, this team acts as an incident response team and control group to ensure that security operational procedures are performed, and risks are addressed in a timely manner. This team maintains a 24/7/365 on-call rotation.

• Lead the daily operations of the information security operations program, aligning business objectives and risk tolerance.
• Develop, implement, and continuously improve security procedures.
• Actively participate in incident response and threat detection alongside the team, serving as a hands-on escalation point and ensuring rapid and effective resolution.
• Track and report on key security metrics (e.g., MTTD, MTTR) to leadership.
• Collaborate with IT, legal, compliance, privacy, and executive teams for holistic risk management.
• Leverage automation and threat intelligence to enhance security operations.
• Manage vendor relationships.
• Coach and mentor analysts through hands-on support, including real-time incident handling, threat hunting, and query development.

What We’re Looking For

• Ideally 8+ years' experience in Information Security and/or Information Technology in an operations role
• Minimum of 6 years prior experience in a role exclusively responsible for information security incident response
• Prior experience managing or leading people on an information security team
• Experience leading incident response in a global environment, including hands-on triage, investigation, and containment alongside the team
• Willingness to participate in the 24/7/365 on-call rotation alongside the team. This is a hands-on manager position.
• Experience building and maintaining SOAR playbooks.
• Experience building and maintaining SOAR playbooks.
• Fluency with Splunk Processing Language [SPL], YARA-L, and Kusto Query Language [KQL]
• Experience working with JIRA, ServiceNow or similar platforms
• Experience working with DLP platforms
• Experience creating, collecting, and assembling metrics for reporting
• Experience working with hybrid (on-prem and Cloud) technology platforms and applications
• Extensive experience securing and/or troubleshooting computer systems and networks
• Extensive experience with Malware Assessment and Incident Response
• Experience with SIEM platforms; Splunk and Microsoft Sentinel experience preferred
• Experience reviewing logs, scripting tasks or creating structured queries/regex searches
• Solid understanding of AI, its associated risks, and security use cases
• Awareness of Information Security best practices and financial regulatory requirements
• Excellent problem-solving and risk decision-making skills
• Excellent verbal and written communication skills; ability to communicate clearly to several levels of management while catering communication style to a wide range of technical, business, and cultural backgrounds across various business units
• Ability to represent data in the most meaningful form
• Ability to think and operate independently with limited guidance
• Bachelor's degree in Computer Science, Information Systems, or Information Security (equivalent experience may be considered)
• CISSP, CISM, OSCP, CRISC, GSEC, GCIH, GCIA, GCFA, GFCE, GSE are preferred but not required (other advanced certifications considered)
• Excellent program/project management, prioritization, and organizational skills
• Acute attention to detail and solid leadership abilities,