Senior Security Operations & Incident Response Lead

panerabread; Georgia; On-site; USD 140,000 - 180,000; Full time

Job summary

Panera Bread is seeking a Sr. Manager, Security Services to lead cybersecurity operations, maintain compliance, and drive the effectiveness of security controls and services.

This role oversees security monitoring, incident response, vulnerability management, DLP, threat intelligence, and both internal teams and third-party providers, such as MDR and outsourced SOC services. The position ensures audit readiness and practical risk reduction.

Responsibilities

• Lead day-to-day Security Operations, including monitoring, threat detection, investigation, incident response, escalation, containment, recovery, and post-incident improvement.
• Develop, maintain, and test incident-response runbooks, investigation procedures, escalation workflows, and operational playbooks used by internal teams and third-party providers.
• Provide operational oversight of third-party security service providers, including MDR and outsourced SOC services; monitor service quality, alert effectiveness, escalation performance, investigation outcomes, and corrective actions.
• Own and mature the vulnerability and exposure management program, including internal and external scanning, risk-based prioritization, remediation coordination, exception management, validation, and reporting.
• Serve as the operational owner and SME for assigned security platforms and services by defining operational requirements, roadmaps, enhancements, and improving automation and visibility.
• Oversee administration, support, documentation, monitoring, lifecycle management, and performance of assigned security platforms, ensuring alignment with security and compliance requirements.
• Lead operational DLP processes, including monitoring, investigation, severity classification, escalation, notification, exception handling, remediation, and reporting.
• Oversee threat intelligence and digital-risk-protection activities involving compromised credentials, impersonation, fraudulent domains, dark-web exposure, brand abuse, and active threats.
• Lead Information Security participation in AI use-case reviews, evaluating risks related to data handling, access, vendors, integrations, model training, retention, processing locations, and technical controls.
• Provide security consultation, governance, and risk guidance for enterprise projects, technology initiatives, business programs, and vendor implementations; recommend appropriate controls and mitigation strategies.
• Ensure operational security controls support PCI DSS, SOX-related security considerations, audit, contractual, policy, privacy, and other applicable compliance requirements.
• Coordinate audit and compliance evidence, validate control operation, and drive corrective actions arising from audits, security assessments, control deficiencies, penetration tests, vulnerability assessments, and compliance reviews through closure.
• Develop and maintain operational dashboards and provide clear reporting on incidents, vulnerabilities, active threats, DLP activity, remediation progress, compliance readiness, third-party SOC performance, and overall security posture.
• Support and enhance security awareness campaigns, phishing simulations, security communications, user education, and compliance-related training obligations including annual PCI awareness requirements.
• Manage the commercial and lifecycle aspects of security vendor and service provider relationships, including service reviews, licensing, renewals, performance improvement, and lifecycle planning, in partnership with Procurement.
• Lead, coach, and develop security professionals while strengthening documentation, cross-training, accountability, and operational resilience.
• Partner with Security Engineering, Platform Engineering, Infrastructure, Cloud, Network, Endpoint, Application, Enterprise Architecture, Legal, Privacy, Internal Audit, and GRC.

Job description

Panera Bread is seeking a Sr. Manager, Security Services to lead cybersecurity operations, maintain compliance, and drive the effectiveness of security controls and services.

This role oversees security monitoring, incident response, vulnerability management, DLP, threat intelligence, and both internal teams and third-party providers, such as MDR and outsourced SOC services. The position ensures audit readiness and practical risk reduction.