Manager, Information Security (Hybrid)

AAA National; Town of Florida (NY); On-site; USD 110,000 - 138,000; Full time

Benefits offered by this job

Associates Incentive Plan

Job summary

AAA, Inc. is seeking a Manager, Information Security in New York to lead the SOC and drive the organization’s security operations strategy. You will oversee threat detection, incident response, and vulnerability management while guiding security technologies and a growing team.

Requirements include 7+ years in cybersecurity, leadership of security professionals, and hands-on expertise with SIEM/EDR tools. Collaboration with IT, Legal, and business units is essential.

Qualifications

• Bachelor’s degree or equivalent experience in a security-related field.
• 7+ years of progressive cybersecurity or information security experience.
• Experience leading security professionals or technical teams.
• Hands-on experience with SIEM/SOAR platforms and related security tech.

Responsibilities

• Lead the SOC and execute security operations strategy and roadmap.
• Direct incident response, breach investigations, containment, and reporting.
• Oversee threat detection, vulnerability management, and threat-hunting.
• Implement and optimize security technologies (SIEM/EDR/IAM/IID).
• Partner with cross-functional teams to embed security in solutions.
• Manage security vendors, audits, and program metrics.
• Develop cybersecurity metrics and report to leadership.
• Mentor security professionals and provide escalation leadership.

Skills

Security leadership

Incident response

Threat detection

Team development

Education

Bachelor’s degree in Cybersecurity, CS, IS, Engineering

Tools

SIEM

EDR/XDR

IAM/PAM

Vulnerability management

Cloud security

WebApp firewalls

IDS/IPS

DLP

Rapid7

CrowdStrike

Job description

Business Summary
The Manager, Information Security, leads the organization’s information security operations and is responsible for protecting enterprise systems, data, and technology platforms from evolving cybersecurity threats. This role provides strategic and hands-on leadership for the Security Operations Center (SOC), including threat detection, incident response, vulnerability management, security technologies, and team development.

Business Summary
The Manager, Information Security, leads the organization’s information security operations and is responsible for protecting enterprise systems, data, and technology platforms from evolving cybersecurity threats. This role provides strategic and hands-on leadership for the Security Operations Center (SOC), including threat detection, incident response, vulnerability management, security technologies, and team development.

Key Responsibilities

• Lead the Security Operations Center (SOC) and execute the organization’s security operations strategy and roadmap.
• Direct cybersecurity incident response and breach investigations, including detection, containment, recovery, and reporting.
• Oversee security monitoring, threat detection, threat intelligence, vulnerability management, and threat-hunting activities.
• Lead the implementation and optimization of enterprise security technologies, including SIEM, EDR/XDR, IAM/PAM, IDS/IPS, cloud security, and vulnerability-management platforms.
• Partner with Infrastructure, Cloud, Development, Legal, Procurement, and business teams to integrate security requirements into technology solutions and business processes.
• Manage security vendors, technology partners, audits, and operational security services.
• Develop and report cybersecurity metrics, KPIs, security trends, and program effectiveness to leadership.
• Lead, mentor, and develop security professionals while providing technical guidance and escalation leadership for significant security incidents.

Education & Experience

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, or equivalent relevant experience.
• 7+ years of progressive cybersecurity or information security experience, including significant experience in Security Operations, Security Engineering, or incident response.
• Demonstrated experience leading security professionals or technical cybersecurity teams.
• Hands-on experience with SIEM/SOAR platforms such as Rapid7, CrowdStrike, or comparable technologies.
• Working knowledge of EDR/XDR, IAM/PAM, vulnerability management, cloud security, WebApp firewalls, IDS/IPS, DLP, and related enterprise security technologies.
• Knowledge of cybersecurity frameworks and standards such as NIST CSF, , ISO 27001, and CIS 18 Controls.
• CISSP, CISM, GCIH, CEH, AWS Security, Microsoft Security, or comparable certification preferred.

Hiring Range: $109,700 to $138,220 This position is also eligible for participation in AAA, Inc.'s Associates Incentive Plan.

AAA, Inc. is committed to paying competitively and equitably. The posted range for this position represents competitive compensation based on market data, internal equity, and the skills and requirements of the position. The compensation offered will depend on your qualifications and experience.

AAA, Inc. is not accepting unsolicited assistance from any search firms for this employment opportunity. All resumes submitted by search firms to any employee working at AAA, Inc., either by email, the Internet, or in any form and method, without a valid written Statement of Work in place for this position from AAA, Inc. will be deemed the sole property of AAA, Inc. No fee will be paid if AAA, Inc. hires the candidate due to the referral or through other means.