Sr. Manager, Security Services

panerabread; Georgia; Presencial; USD 140.000 - 180.000; Jornada completa

Descripción de la vacante

Panera Bread is seeking a Sr. Manager, Security Services to lead cybersecurity operations, maintain compliance, and drive the effectiveness of security controls and services.

This role oversees security monitoring, incident response, vulnerability management, DLP, threat intelligence, and both internal teams and third-party providers, such as MDR and outsourced SOC services. The position ensures audit readiness and practical risk reduction.

Responsabilidades

• Lead day-to-day Security Operations, including monitoring, threat detection, investigation, incident response, escalation, containment, recovery, and post-incident improvement.
• Develop, maintain, and test incident-response runbooks, investigation procedures, escalation workflows, and operational playbooks used by internal teams and third-party providers.
• Provide operational oversight of third-party security service providers, including MDR and outsourced SOC services; monitor service quality, alert effectiveness, escalation performance, investigation outcomes, and corrective actions.
• Own and mature the vulnerability and exposure management program, including internal and external scanning, risk-based prioritization, remediation coordination, exception management, validation, and reporting.
• Serve as the operational owner and SME for assigned security platforms and services by defining operational requirements, roadmaps, enhancements, and improving automation and visibility.
• Oversee administration, support, documentation, monitoring, lifecycle management, and performance of assigned security platforms, ensuring alignment with security and compliance requirements.
• Lead operational DLP processes, including monitoring, investigation, severity classification, escalation, notification, exception handling, remediation, and reporting.
• Oversee threat intelligence and digital-risk-protection activities involving compromised credentials, impersonation, fraudulent domains, dark-web exposure, brand abuse, and active threats.
• Lead Information Security participation in AI use-case reviews, evaluating risks related to data handling, access, vendors, integrations, model training, retention, processing locations, and technical controls.
• Provide security consultation, governance, and risk guidance for enterprise projects, technology initiatives, business programs, and vendor implementations; recommend appropriate controls and mitigation strategies.
• Ensure operational security controls support PCI DSS, SOX-related security considerations, audit, contractual, policy, privacy, and other applicable compliance requirements.
• Coordinate audit and compliance evidence, validate control operation, and drive corrective actions arising from audits, security assessments, control deficiencies, penetration tests, vulnerability assessments, and compliance reviews through closure.
• Develop and maintain operational dashboards and provide clear reporting on incidents, vulnerabilities, active threats, DLP activity, remediation progress, compliance readiness, third-party SOC performance, and overall security posture.
• Support and enhance security awareness campaigns, phishing simulations, security communications, user education, and compliance-related training obligations including annual PCI awareness requirements.
• Manage the commercial and lifecycle aspects of security vendor and service provider relationships, including service reviews, licensing, renewals, performance improvement, and lifecycle planning, in partnership with Procurement.
• Lead, coach, and develop security professionals while strengthening documentation, cross-training, accountability, and operational resilience.
• Partner with Security Engineering, Platform Engineering, Infrastructure, Cloud, Network, Endpoint, Application, Enterprise Architecture, Legal, Privacy, Internal Audit, and GRC.

Descripción del empleo

Sr. Manager, Security Services

Sr. Manager, Security Services

About the Role

We are seeking a Sr. Manager, Security Services to lead cybersecurity operations, maintain operational compliance, and improve the effectiveness of security controls and services. This role oversees security monitoring, incident response, vulnerability and exposure management, Data Loss Prevention, threat intelligence, security awareness, assigned security platforms, and third-party security providers. This hands-on leadership role combines team and program leadership with direct accountability for critical operational outcomes. The successful candidate will lead security response activities, translate security and compliance requirements into sustainable practices, and apply practical knowledge of PCI DSS, audit readiness, control validation, risk management, privacy-related security obligations, and evidence requirements. The role provides operational governance for Managed Detection and Response and outsourced Security Operations Center services, including providers such as Red Canary. It holds internal teams and external providers accountable through clear responsibilities, escalation paths, service expectations, performance metrics, runbooks, and documented processes.

Key Responsibilities

• Lead day-to-day Security Operations, including monitoring, proactive threat detection, investigation, incident response, escalation, containment, recovery, and post-incident improvement.
• Develop, maintain, and periodically test incident-response runbooks, investigation procedures, escalation workflows, and operational playbooks used by internal teams and third-party providers.
• Provide operational oversight of third-party security service providers, including MDR and outsourced SOC services; monitor service quality, alert effectiveness, escalation performance, investigation outcomes, and corrective actions.
• Own and mature the vulnerability and exposure management program, including internal and external scanning, risk-based prioritization, remediation coordination, exception management, validation, and reporting.
• Serve as the operational owner and subject matter expert for assigned security platforms and services by defining operational requirements, establishing capability roadmaps, coordinating enhancements, and improving automation, visibility, utilization, and measurable risk reduction.
• Oversee the administration, support, documentation, monitoring, lifecycle management, and performance of assigned security platforms, ensuring reliable operation and alignment with approved security and compliance requirements.
• Lead operational DLP processes, including monitoring, investigation, severity classification, escalation, notification, exception handling, remediation, and reporting.
• Oversee threat intelligence and digital-risk-protection activities involving compromised credentials, impersonation, fraudulent domains, dark-web exposure, brand abuse, active threats, and other external risks.
• Lead Information Security participation in AI use-case reviews, evaluating risks related to data handling, access, vendors, integrations, model training, retention, processing locations, and technical controls, and documenting required safeguards or risk-treatment actions.
• Provide security consultation, governance, and risk guidance for enterprise projects, technology initiatives, business programs, and vendor implementations; recommend appropriate controls, compensating controls, and mitigation strategies.
• Ensure operational security controls support PCI DSS, SOX-related security considerations, audit, contractual, policy, privacy, and other applicable compliance requirements.
• Coordinate audit and compliance evidence, validate control operation, and drive corrective actions arising from audits, security assessments, control deficiencies, penetration tests, vulnerability assessments, and compliance reviews through closure.
• Develop and maintain operational dashboards and provide clear reporting on incidents, vulnerabilities, active threats, DLP activity, remediation progress, compliance readiness, third-party SOC performance, and overall security posture.
• Support and enhance security awareness campaigns, phishing simulations, security communications, user education, and compliance-related training obligations, including annual PCI security awareness requirements.
• Manage the commercial and lifecycle aspects of security vendor and service provider relationships, including service reviews, technical escalations, licensing, renewals, performance improvement, and lifecycle planning, in partnership with Procurement.
• Lead, coach, and develop security professionals while strengthening documentation, cross-training, accountability, and operational resilience.
• Partner with Security Engineering, Platform Engineering, Infrastructure, Cloud, Network, Endpoint, Application, Enterprise Architecture, Legal, Privacy, Internal Audit, the Governance, Risk, and Compliance (GRC)