Director of Security Operations

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Director of Security Operations based in the United States.

• Lead the daily operations of the Security Operations Center (SOC), establishing effective processes, priorities, monitoring strategies, and operational standards.
• Oversee incident response and threat management activities, ensuring security incidents are identified, contained, investigated, and resolved effectively.
• Develop and evolve security monitoring, threat intelligence, and detection capabilities to improve the organization's ability to identify emerging threats.
• Lead vulnerability management efforts and help prioritize remediation based on business and security risk.
• Develop, implement, and maintain security policies, procedures, and operational controls aligned with organizational requirements.
• Manage security risk by balancing immediate operational needs with longer-term strategies that strengthen the organization's security posture.
• Anticipate developments in AI and AIOps and assess opportunities to improve automation, log ingestion, monitoring, and incident response while maintaining security quality.
• Build, manage, and develop a high-performing security operations team through effective hiring, coaching, feedback, goal-setting, and performance management.
• Establish clear and ambitious objectives, remove roadblocks, and ensure the team consistently delivers against its priorities.
• Build strong relationships with stakeholders across technology, operations, compliance, and other business functions to increase the effectiveness and reach of security initiatives.
• Partner with organizational leaders to strengthen the processes and systems protecting sensitive information, patients, employees, and business operations.
• Support compliance and risk-management activities involving requirements and frameworks such as HIPAA, GDPR, PCI DSS, NIST, ISO 27001, and CIS Controls.

• Bachelor’s degree in Computer Science, Information Security, or a related discipline; a master’s degree is preferred.
• At least 10 years of professional experience in security operations, including a minimum of 5 years in a leadership or management capacity.
• Proven experience managing a Security Operations Center and leading incident response programs.
• Strong technical knowledge of security technologies such as SIEM, IDS/IPS, EDR, firewalls, and vulnerability management platforms.
• Experience working with regulatory and compliance requirements, including HIPAA, GDPR, and PCI DSS.
• Strong understanding of recognized security frameworks and standards, including NIST, ISO 27001, and CIS Controls.
• Excellent analytical, problem-solving, and risk-management capabilities, with a proactive and forward-looking approach.
• Strong leadership and people-development skills, including the ability to provide clear, timely, and actionable feedback.
• Excellent written, verbal, and interpersonal communication skills, with the ability to influence stakeholders across functions and levels.
• Ability to manage multiple priorities, navigate high-pressure situations, and make sound decisions in complex or ambiguous environments.
• Demonstrated ability to collaborate effectively across teams and translate security priorities into meaningful business outcomes.
• Interest in emerging security technologies, automation, AI, and AIOps, with an ability to identify practical opportunities for improving security operations.

• Fully remote work environment within the United States.
• Flexible work schedules for eligible roles.
• Health, dental, and vision insurance with the employer covering up to 80% of premiums for employees, dependents, and domestic partners.
• 21 days of paid time off during the first year.
• 11 paid holidays and two paid volunteer days.
• 12 weeks of paid parental leave for all new parents.
• Six-week paid sabbatical after six years of service.
• 401(k) plan with up to a 4% employer match.
• Stock options.
• Educational assistance and clinical employee reimbursement programs.
• Opportunities for professional development in a collaborative, innovation-focused environment.
• A remote-first culture emphasizing work-life flexibility, inclusion, learning, and meaningful impact.