Job Detail

Primary Duties and Responsibilities

Reporting directly to the Director Cyber Security, the Cyber Security Operations Manager is responsible for the operations of the Hoag Cyber Security Operation Center (SOC), including its cyber security technologies, threat management and reporting, incident monitoring/response, communications, and risk management.

The manager is responsible for process development, implementation and refinement, project management, cross-team/partner collaboration, maintenance of internal and external stakeholder relationships, and direct supervision of the SOC staff. The SOC manager should be able to work in a fast-paced, ever-changing environment.

Other responsibilities include immediate security incident and event response management, identification, triage and response to security incidents, Threat & Vulnerability Management (TVM), operational metrics design and reporting.

Sets Cybersecurity goals & direction, motivating staff to achieve outcomes. Contributes to the strategy and planning of overall Cyber Security solutions delivery, growth, and operations.

Education and Experience

• Expert-level knowledge of the Incident Response (IR) process. Lead complex Cyber investigations impacting the Hoag environment.
• Experience managing Managed Security Service Provider (MSSP).
• 3 years’ experience managing SOC, preferably in the healthcare industry
• Facilitated SOC team education and skill development
• 5-8 years’ work experience in Information Security
• Experience managing Threat and Vulnerability Management Program
• Strong Networking and Cyber Security Background
• Deep Understanding of Microsoft Security Stack, including Defender and Sentinel
• Deep understanding of the Email Gateway solution and lead the investigations using the Hoag email gateway technology.
• Deep Understanding of External Attack Surface Management
• Understanding of MITRE ATT&CK framework
• Understanding of HIPAA, PCI DSS and NIST Cybersecurity Framework
• Experience in the healthcare industry preferred
• Experience with Azure and AWS cloud environment
• Undergraduate degree in computer science, computer engineering, information security, IT management or related field.
Four (4) years’ experience with Cyber Security Operations; Four (4) years’ experience translating business requirements and priorities into cyber security standards; Four (4) years of work experience in a role requiring interaction with executive leadership, all preferred

Certifications Preferred
Information security management qualifications such as one of the following certifications: