POSITION PURPOSE: The Security Operations Manager is accountable for CIMs’ readiness to prevent, respond to, and recover from cybersecurity incidents. This role is accountable for CIM’s cybersecurity posture by ensuring the appropriate controls are in place, our user population has the necessary cybersecurity training, and the day-to-day management of cybersecurity threats are handled appropriately.
The Security Operations Manager partners closely with Engineering, Support, Compliance, and Product teams to ensure controls are effective, risks are actively managed, and operations support overall business continuity and resilience objectives. This role plays a critical part in protecting our customers, employees, and operations, while enabling the business to grow securely and confidently.
POSITION PURPOSE: The Security Operations Manager is accountable for CIMs’ readiness to prevent, respond to, and recover from cybersecurity incidents. This role is accountable for CIM’s cybersecurity posture by ensuring the appropriate controls are in place, our user population has the necessary cybersecurity training, and the day-to-day management of cybersecurity threats are handled appropriately.
The Security Operations Manager partners closely with Engineering, Support, Compliance, and Product teams to ensure controls are effective, risks are actively managed, and operations support overall business continuity and resilience objectives. This role plays a critical part in protecting our customers, employees, and operations, while enabling the business to grow securely and confidently.
WHAT CIM OFFERS: At CIM, we believe our success stems from our collective efforts, and we are committed to providing well-rounded support and resources for our employees. In addition to a competitive compensation plan, CIM offers a comprehensive benefits program for employees to thrive both inside and outside of work. Eligible employees can enjoy a wide range of benefits, including: A variety of Medical, dental, and vision benefit plans Health Savings Account with a generous employer contribution Company paid life and disability insurance 401(k) savings plan, with company match Comprehensive paid time off, including: vacation days, 10 designated holidays, sick time, and bereavement leave Up to 16 hours of volunteer time off Up to 16 weeks of Paid Parental Leave Ongoing professional development programs Wellness program, including monthly and quarterly prizes And more!
Actual base salary considers several factors including but not limited to geography, job-related knowledge, experience, and budget. The start of the salary range is typically associated with the minimum experience required. At CIM, base pay is one part of the total compensation package.
This role is eligible for bonus pay in addition to base salary. The anticipated base salary range for the position in Los Angeles, CA is $120,000 - $135,000.
- Minimum 8 years of Cybersecurity analyst/management experience.
- Formal training in Cybersecurity governance, risk, and compliance (GRC).
- Understanding of SOC 2, SOX, NIST, and GDPR compliance.
- Expert knowledge of information security principles, practices, and architectures.
- Expert knowledge with Threat Detection, Email Security, DLP, Data Governance tools such as Proofpoint, MS Defender, or Mimecast.
- Hands-on experience with the development of Cybersecurity Training and Phishing Campaigns.
- Experience with Vulnerability Management Platforms such as Rapid7 and Qualys.
- Experience with Patch Management platforms such as SCCM and Ivanti.
- Understanding of supporting technology audits and testing technology controls.
- Understanding of cloud environments such as Azure, SalesForce.com and Office365. Security Operations & Incident Response
- Ensure security alerts and anomalous activities are continuously monitored, accurately logged, and escalated in accordance with established procedures.
- Lead and coordinate timely, effective response to cybersecurity incidents to minimize business impact.
- Support restoration of affected systems and services following cybersecurity incidents, including leading forensic investigations as required.
- Research emerging threats and attack vectors, and implement appropriate countermeasures to continuously strengthen the organization’s security posture.
- Coordinate internal and external penetration testing activities to identify and remediate exploitable weaknesses.
- Ensure protective security controls are implemented and operating effectively to reduce risk exposure.
- Coordinate with compliance and IT teams to design, implement, and maintain operational security controls.
- Support asset cataloging and ownership alignment to ensure accountability for systems, data, and security controls.
- Execute quarterly User Access Reviews across the application portfolio in an efficient manner.
- Respond to external audit and compliance questionnaires, providing accurate and timely security documentation and evidence.
- Ensure employees, vendors and/or contractors with access to systems and data are appropriately trained in relevant security awareness and individual security responsibilities.
- Design, manage, and enforce the organization’s security awareness program, including the execution of recurring phishing simulation campaigns.
- Support the development, testing, and ongoing improvement of Disaster Recovery plans to ensure the organization can effectively respond to and recover from disruptive events, including cybersecurity incidents.
- Serve as a trusted security advisor to internal teams, raising awareness and providing guidance to help protect products, systems, and services from known and emerging threats.
- Ability to produce executive reporting to illustrate Cybersecurity posture and areas for improvement.
- Ability to communicate and present ideas and recommendations effectively to Technology management.
- Ability to translate Cybersecurity information into a manner that end users can understand.
- None.
- Regular reporting of key Cybersecurity metrics for the company to executive management.
- Year over year Improvement of scores within the vulnerability management platform.
- Meet all compliance requirements related to Cybersecurity.
- Timely completion of preventive Cybersecurity measures such as User Access Reviews, End User Cybersecurity Training, and Phishing Campaigns.
- Reduction of Cybersecurity issues uncovered by 3 rd party security testing and compliance audits.