Senior Security Operations & Incident Response Lead

Panera LLC; United States; On-site; USD 145,000 - 187,000; Full time

Job summary

Panera LLC seeks a Sr. Manager, Security Services to lead cybersecurity operations, guide incident response, and drive risk reduction across the organization in the United States.

You will coordinate with internal teams and external MDR/SOC providers, oversee vulnerability management, DLP, threat intel, and governance to ensure audit readiness and regulatory compliance. You will own security platforms, lead cross‑functional security programs, and mentor security professionals while delivering

Qualifications

• Bachelor’s degree in cybersecurity, IT, information systems, CS, risk management, or related discipline; or equivalent practical experience.
• 7+ years of progressive cybersecurity experience with focus on security operations, vulnerability management, risk management, compliance, or related areas.
• At least 3 years of experience leading cybersecurity teams and programs including staff development and cross-functional security activities.
• Experience with incident response, vulnerability management, threat analysis, application security risks, endpoint/server/network security, cloud security, DLP, threat intel, and data protection.
• Experience overseeing MDR, outsourced SOC, managed security services, or similar third‑party providers.
• Working knowledge of PCI DSS, SOX security considerations, privacy and personal-information protection, audit readiness, control validation, risk assessment, remediation tracking, and evidence management.
• Ability to translate regulatory, contractual, policy, and control requirements into sustainable operational security processes.
• Experience owning enterprise security platforms and managing vendor/provider relationships (licensing, renewals, service reviews).
• Excellent communication skills to convey security/risk/compliance to executives, auditors, and providers.

Responsibilities

• Lead day-to-day Security Operations, including monitoring, proactive threat detection, investigation, incident response, escalation, containment, recovery, and post-incident improvements.
• Develop and test incident-response runbooks, procedures, escalation workflows, and operational playbooks used by internal teams and third-party providers.
• Oversee third-party security service providers, including MDR and outsourced SOC, monitor service quality and performance.
• Own the vulnerability and exposure management program, including scanning, prioritization, remediation coordination, exception management, validation, and reporting.
• Serve as operational owner for assigned security platforms, define requirements, roadmaps, enhancements, and automation.
• Manage security platform administration, support, documentation, monitoring, lifecycle management, and compliance alignment.
• Lead operational DLP processes: monitoring, investigation, escalation, remediation, reporting.
• Oversee threat intelligence and digital-risk protection activities involving compromised credentials, impersonation, domains, dark-web, and brand risk.
• Lead AI use‑case security reviews, assess data handling, vendors, model training, retention, processing locations, and controls.
• Provide security governance and risk guidance for enterprise projects and vendor implementations; recommend controls and mitigations.
• Ensure controls support PCI DSS and SOX, audit readiness, policy compliance, privacy obligations, and evidence requirements.
• Coordinate audits, validate control operation, and drive corrective actions from audits and assessments.
• Develop dashboards and reporting on incidents, vulnerabilities, threats, DLP, compliance readiness, and third‑party performance.
• Support security awareness campaigns, phishing simulations, and compliance training including PCI awareness.
• Manage vendor/provider relationships, including reviews, escalations, licensing, renewals, and lifecycle planning.

Skills

Security Operations

Incident Response

Vulnerability Management

Threat Intelligence

Data Loss Prevention

Audit Readiness

Risk Management

Vendor Management

Policy & Compliance

Security Governance

AI Governance

Communication

Education

Bachelor’s degree or equivalent in Cybersecurity/IT/IS/CS/Risk Management

Tools

MDR

SOC

Job description

Panera LLC seeks a Sr. Manager, Security Services to lead cybersecurity operations, guide incident response, and drive risk reduction across the organization in the United States.

You will coordinate with internal teams and external MDR/SOC providers, oversee vulnerability management, DLP, threat intel, and governance to ensure audit readiness and regulatory compliance. You will own security platforms, lead cross‑functional security programs, and mentor security professionals while delivering