Lead the daily operations of the information security operations program, aligning business objectives and risk tolerance.
Develop, implement, and continuously improve security procedures.
Actively participate in incident response and threat detection alongside the team, serving as a hands-on escalation point and ensuring rapid and effective resolution.
Track and report on key security metrics (e.g., MTTD, MTTR) to leadership.
Collaborate with IT, legal, compliance, privacy, and executive teams for holistic risk management.
Leverage automation and threat intelligence to enhance security operations.
Manage vendor relationships.
Coach and mentor analysts through hands-on support, including real-time incident handling, threat hunting, and query development.
What We’re Looking For
Ideally 8+ years’ experience in Information Security and/or Information Technology in an operations role
Minimum of 6 years prior experience in a role exclusively responsible for information security incident response
Prior experience managing or leading people on an information security team
Experience leading incident response in a global environment, including hands-on triage, investigation, and containment alongside the team
Willingness to participate in the 24/7/365 on-call rotation alongside the team. This is a hands-on manager position.
Experience building and maintaining SOAR playbooks.
Fluency with Splunk Processing Language [SPL], YARA-L, and Kusto Query Language [KQL]
Experience working with JIRA, ServiceNow or similar platforms
Experience working with DLP platforms
Experience creating, collecting, and assembling metrics for reporting
Experience working with hybrid (on-prem and Cloud) technology platforms and applications
Extensive experience securing and/or troubleshooting computer systems and networks
Extensive experience with Malware Assessment and Incident Response
Experience with SIEM platforms; Splunk and Microsoft Sentinel experience preferred
Experience reviewing logs, scripting tasks or creating structured queries/regex searches
Solid understanding of AI, its associated risks, and security use cases
Awareness of Information Security best practices and financial regulatory requirements
Excellent problem-solving and risk decision-making skills
Excellent verbal and written communication skills; ability to communicate clearly to several levels of management while catering communication style to a wide range of technical, business, and cultural backgrounds across various business units
Ability to represent data in the most meaningful form
Ability to think and operate independently with limited guidance
Bachelor’s degree in Computer Science, Information Systems, or Information Security (equivalent experience may be considered)
CISSP, CISM, OSCP, CRISC, GSEC, GCIH, GCIA, GCFA, GFCE, GSE are preferred but not required (other advanced certifications considered)
Excellent program/project management, prioritization, and organizational skills
Acute attention to detail and solid leadership abilities, with a genuine desire to lead by example and stay close to the work
Nashville, Tennessee
