Senior Security Operations Lead

KeHE Distributors, LLC; Naperville (IL); Hybrid; USD 130,000 - 190,000; Full time

Benefits offered by this job

Health/Rx

Dental

Vision

FSA/HSA

Life insurance

401(k)

Paid time off

Paid sick time

STD/LTD

ESOP

Holiday pay

Job summary

KeHE Distributors, LLC is seeking a Security Operations Manager to lead and mature the organization's information security operations. You will own day-to-day security operations, manage a team of security engineers, and drive the vulnerability management program with internal and external partners.

You will collaborate with IT leadership to reduce risk, respond to incidents, and establish scalable security processes, reporting metrics to leadership and ensuring compliance with policy and audits.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or related field; or equivalent practical experience.
• 5+ years experience in information security, with minimum of 2 years in a lead/management capacity.
• Experience building or maturing security functions, rather than solely operating within established programs.
• Experience with incident response, including investigation, coordination, and post-incident improvement.
• Experience managing managed detection and response or MSSP partnerships, including holding a provider accountable to coverage and service outcomes.
• Experience developing security policies, standards, and risk management processes, supporting audit or certification programs, building vendor or third-part risk management processed, or mentoring/managing security staff preferred.
• Relevant information security certification (e.g., CISSP, CISM, GCIH, GCIA, or comparable), or equivalent demonstrated experience (or ability to obtain within 12 months).

Responsibilities

• Own day-to-day SOC operations, including alert triage standards, escalation paths, and incident response coordination and manage a team of security engineers.
• Develop and maintain incident response processes, playbooks, and escalation procedures; coordinate investigations with internal teams and external partners.
• Manage the MDR/MSSP partnership, ensuring coverage, service quality, and timely response.
• Drive detection engineering improvements across SIEM/EDR/XDR and other security tooling; own operational metrics (MTTD/MTTR).
• Build and own the end-to-end vulnerability management program, from identification through remediation and reporting.
• Define risk-based remediation timelines and priorities; coordinate with technical teams to drive resolution.
• Track and report on remediation progress and program effectiveness.
• Embed vulnerability management into operational processes with IT partners.
• Partner with IT Leadership to develop and mature the information security program, expanding scope as priorities evolve.
• Recruit, mentor, and develop security staff; build repeatable, documented processes so the program isn’t dependent on any one person.
• Define operating procedures, escalation paths, and reporting cadences for owned functions.
• Produce security metrics and program updates for leadership; maintain visibility into open risks and elevate blockers.
• Represent the security program in cross-functional meetings and with external partners.
• Support policy maintenance, control tracking, risk register upkeep, vendor/third-party risk management, including posture assessments and findings tracking.
• Contribute to audit/certification readiness, including evidence collection and control documentation.
• Contribute to security awareness training and organization-wide communications.
• Evaluate security practices for AI/agentic tools; provide input on governance, guardrails, and acceptable-use guidance.
• Stay current on the threat landscape and help the program adapt to new risks and use cases.
• Other duties and projects as assigned.

Skills

Security operations

Vulnerability management

IAM management

Incident response

MDR/MSSP mgmt

Security policies

Audit readiness

Security metrics

Communication skills

Team leadership

Threat intelligence awareness

AI security practices

Education

Bachelor’s degree in Information Security, Computer Science, Information Technology, or related field

Job description

KeHE Distributors, LLC is seeking a Security Operations Manager to lead and mature the organization's information security operations. You will own day-to-day security operations, manage a team of security engineers, and drive the vulnerability management program with internal and external partners.

You will collaborate with IT leadership to reduce risk, respond to incidents, and establish scalable security processes, reporting metrics to leadership and ensuring compliance with policy and audits.