Manager, Information Security, CX

Nice; Sandy (UT); On-site; USD 100,000 - 130,000; Full time

Job summary

NICE is seeking a Manager of Information Security to lead operational security efforts, ensuring compliance with FedRAMP and PCI DSS standards. The role involves overseeing vulnerability management and cross-functional coordination with various teams.

Ideal candidates should have extensive experience in cybersecurity, a relevant degree, and strong leadership skills. Responsibilities include leading the Security Operations team and ensuring effective risk management and compliance reporting.

Qualifications

• 3+ years of leadership in cybersecurity or security operations.
• 5+ years in cybersecurity, vulnerability management, compliance operations.
• Familiarity with security frameworks like FedRAMP, PCI DSS, NIST.

Responsibilities

• Lead the Security Operations team for vulnerability management.
• Oversee vulnerability scanning and remediation coordination.
• Support compliance activities related to PCI DSS and FedRAMP.

Skills

Leadership experience in cybersecurity

Vulnerability management

Compliance operations

Security frameworks

Communication skills

Incident response

Education

Bachelor’s degree in cybersecurity or related field

Security certifications (e.g., Security+, CySA+)

Tools

Rapid7

Tenable

Qualys

Job description

Manager, Information Security, CX

Position Summary

The Manager, SecurityOperations, is responsible for leading operational security and compliance activities supporting regulated environments, including FedRAMP-authorized systems and PCI-regulated environments. This role oversees vulnerability management, continuous monitoring, audit support, security readiness activities, and compliance operations across infrastructure and product environments.

The position leads the Security Operations team and works cross-functionally with Security, Infrastructure, Product Engineering, Platform Operations, Compliance, and external assessors to ensure security risks, compliance obligations, and operational control requirements are identified, communicated, tracked, and remediated appropriately.

The role requires a combination of technical security knowledge, operational leadership, organizational discipline, and strong cross-functional coordination skills.

Job Functions & Responsibilities

• Lead the Security Operations team responsible for vulnerability management, continuous monitoring, and compliance support activities.
• Oversee vulnerability scanning, reporting, tracking, prioritization, and remediation coordination across infrastructure and product teams.
• Support and maintain FedRAMP continuous monitoring activities, including recurring reporting, inventory management, and audit evidence collection.
• Support operational security and compliance activities related to PCI DSS and other regulatory frameworks.
• Coordinate and oversee STIG/CIS benchmark validation activities and remediation efforts.
• Support internal and external audits including FedRAMP, PCI DSS, SOC 2, ISO 27001, and customer assessments.
• Ensure recurring compliance deliverables, operational reporting, and audit artifacts are completed accurately and on schedule.
• Coordinate cross-functional remediation efforts with Security, Engineering, Infrastructure, and Product teams.
• Support incident response readiness activities including tabletop exercises, training coordination, and operational documentation maintenance.
• Maintain and improve operational security processes, procedures, and workflows.
• Support resiliency and disaster recovery validation activities and associated compliance reporting.
• Communicate operational risk, remediation status, and compliance concerns to leadership and stakeholders.
• Drive continuous improvement initiatives focused on operational maturity, automation, audit readiness, and vulnerability management effectiveness.
• Follow all company policies, security standards, and applicable compliance requirements.

Education, Experience, & Skills

• 3+ years of leadership or team lead experience in cybersecurity or security operations environments.
• 5+ years of experience in cybersecurity, vulnerability management, compliance operations, or related technical security fields.
• Experience supporting security or compliance programs in regulated environments.
• Familiarity with vulnerability management processes, remediation coordination, and security assessment activities.
• Experience working with vulnerability scanning and reporting platforms such as Rapid7, Tenable, Qualys, or similar tools.
• Familiarity with security frameworks and compliance standards such as FedRAMP, PCI DSS, NIST 800-53, SOC 2, ISO 27001, or CIS benchmarks.
• Strong organizational, communication, and cross-functional coordination skills.
• Ability to manage recurring operational responsibilities and audit-driven deliverables in a fast-paced environment.
• Experience supporting incident response activities, resiliency exercises, or audit evidence collection preferred.
• Experience with public cloud environments such as AWS or Azure preferred.
• Bachelor’s degree in cybersecurity, information systems, or related field preferred, or equivalent combination of education and experience.
• Security certifications such as Security+, CySA+, CASP+, CISSP, or similar certifications preferred.

NiCE is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, age, sex, marital status, ancestry, neurotype, physical or mental disability, veteran status, gender identity, sexual orientation or any other category protected by law.