Manager, Cybersecurity Operations

Xerispharma; Chicago (IL); On-site; USD 120,000 - 165,000; Full time

Job summary

Xeris Pharmaceuticals, Inc. in Chicago is seeking a Manager of Cybersecurity Operations to lead day-to-day security operations with a strong emphasis on Microsoft Azure and Microsoft 365 Defender across endpoints, identities, and core SaaS apps.

You will direct MDR/SOC engagements, mentor the security team, and collaborate with IT, Legal, and Compliance to align security with risk management and governance frameworks.

Qualifications

• Bachelor's degree in computer science, information systems, cybersecurity, or equivalent experience.
• 5+ years of progressive cybersecurity experience with leadership responsibilities.
• Hands-on with IAM, SIEM, vulnerability management in a Microsoft-centric environment.

Responsibilities

• Lead the security operations function, including monitoring, triage, and response for alerts across Azure, Microsoft 365, Windows 365, endpoints, identity, email, and core SaaS applications.
• Direct and coordinate MDR and SOC partners, with clear runbooks, SLAs, and high-quality investigations.
• Manage and coach the security operations team, partnering with IT, Legal, Compliance, and business leaders.
• Establish balance between IT delivery and cybersecurity governance and controls.
• Develop and maintain runbooks and SOPs for security events and tasks.
• Oversee root cause analysis, forensics, and threat hunting across identity, email, endpoints, and cloud workloads.
• Drive incident lifecycle management with metrics, remediation progress, and lessons learned.
• Protect crown jewel assets through data classification, conditional access, and policy enforcement.
• Partner in governance activities including GRC, NIST control assessments, and security improvement tracking.
• Vendor cybersecurity due diligence and third-party risk operations with Procurement and Legal.
• Maintain inventory of security-relevant assets to support monitoring and access control.

Skills

IAM

SIEM

Incident response

Leadership

Cloud security

Microsoft 365

Defender suite

NIST CSF / ISO 27001

Education

Bachelor's degree in computer science, information systems, cybersecurity, or equivalent experience

Tools

Azure AD/Entra ID

Microsoft 365 Defender

MDR tools

Vulnerability scanners

Job description

## Manager, Cybersecurity OperationsApplyremote type: Hybridlocations: Chicago, ILtime type: Full timeposted on: Posted 7 Days Agojob requisition id: JR1021**Job Description:**The Manager, Cybersecurity Operations owns day to day security operations and incident response, with a strong focus on Microsoft Azure, Microsoft 365 (including Defender, Purview, DLP, and IRM), and key SaaS platforms. This role provides both strategic and hands‐on leadership for the security operations team and is accountable for the effectiveness and maturity of security operations in support of the company’s risk management and compliance programs.**Essential Job Functions*** Lead the security operations function, including monitoring, triage, and response for alerts across Azure, Microsoft 365, Windows 365, endpoints, identity, email, and core SaaS applications.* Direct and coordinate Managed Detection and Response (MDR) and SOC partners, ensuring clear runbooks, effective SLAs, and high quality investigations and escalations.* Manage and coach the security operations team, partnering with Infrastructure, Applications, Legal, Compliance, and business leaders to embed security into day to day processes.* Establish a healthy check and balance between IT and cybersecurity so IT focuses on delivery and operations while cybersecurity independently governs, monitors, and enforces controls across the environment.* Develop, maintain, and continuously improve runbooks and standard operating procedures for common security events and operational tasks.* Oversee root cause analysis, basic forensics, and threat hunting activities across identity, email, endpoint, and cloud workloads.* Drive incident lifecycle management: tracking metrics, trends, remediation progress, and lessons learned for technology and business leadership.* Support protection of “crown jewel” assets through data classification, conditional access, and policy enforcement across Microsoft 365 and key business systems.* Partner in governance activities, including GRC platform administration, NIST based control assessments, InfoSec steering committee inputs, and security improvement tracking.* Perform vendor cybersecurity due diligence (e.g., security questionnaires, DDQs, monitoring enrollment) and manage third party risk operations in partnership with Procurement and Legal.* Maintain an accurate inventory of security relevant assets (devices, SaaS applications, privileged accounts) to support monitoring, access control, and vulnerability management.* Contribute to security awareness efforts, including annual training, Cybersecurity Awareness Month activities, and targeted campaigns.* Partner with the Director of Infrastructure and Security on KPIs, operational risk metrics, and budget planning for tools, services, and managed partners.* Identify and recommend opportunities to automate and streamline security operations and system administration.**Skills and Qualifications*** Bachelor’s degree in computer science, information systems, cybersecurity, or equivalent experience; 5+ years of progressive cybersecurity experience with demonstrated leadership responsibility.* Hands‐on experience with IAM, SIEM, and vulnerability management tools, ideally in a Microsoft‐centric environment (Azure AD/Entra ID, Microsoft 365, Defender suite).* Strong understanding of cybersecurity frameworks and controls (e.g., NIST CSF, ISO 27001, CIS) and their application in day‐to‐day operations and governance.* Proven ability to lead incident response, coordinate cross‐functional stakeholders, and communicate clearly with technical and non‐technical audiences.* Demonstrated skills in team leadership, collaboration, project management, and written and verbal communication; strong attention to detail and adaptability in a fast‐changing environment**Working Conditions*** This is a hybrid position based in Xeris’ Chicago office. A minimum of three days per week in the office is required. On-site requirement may change at management’s discretion.* Position may require periodic evening and weekend work, as necessary to fulfill obligations. Periodic overnight travel.*The anticipated base salary range for this position is $120,000 to $165,000.*#LI-HYBRID *Xeris Pharmaceuticals, Inc. (the “Company”) is an equal opportunity employer and does not discriminate based on race, color, religion, sex, gender identity, sexual orientation, national origin, age, disability, veteran status, genetics or any other characteristic protected by law. All qualified candidates are given equal opportunity and the Company’s employment selection decisions are based solely on job-related factors. NOTE: This job description is not intended to be all-inclusive. The employee may be required to perform other related duties as needed to meet the ongoing needs of the Company.**The level of the position will be determined based on the selected candidate’s qualifications and experience.* *Final determination of the actual base salary offered depends on several factors, including but not limited to the candidate’s skills, experience, education, location, and business needs. Employees are eligible for equity or long-term incentive awards, where applicable. Field Sales role employees are eligible for a quarterly commission structure. Non-Sales role employees are eligible for an annual bonus. The Company also offers a comprehensive benefits package that includes additional elements such as paid time off benefits, various health, vision, and dental insurance options, 401(k) retirement benefits and more for eligible employees. Details about these and other offerings will be provided at the time a conditional offer of employment is made. Candidates are always welcome to inquire about our compensation and benefits package during the interview process. Individuals hired as temporary employees, interns, and preceptors are not eligible for commissions, bonuses, and/or long-term incentive or equity awards. Eligibility for other benefits will be based on plan documents.*