Information Security Operations Manager

With constant innovation, cutting-edge technology, and fast-paced development, Stuller is seeking an experienced security leader to join our Information Technology team. The Security Operations team protects the systems, data, and services that enable Stuller to deliver an exceptional customer experience. Through continuous monitoring, threat detection, incident response, risk management, and compliance oversight, the team helps safeguard business operations while supporting growth and innovation. As the Information Security Operations Manager, you will lead Stuller's information security program and Security Operations team. You will establish security strategy, oversee cyber risk and compliance initiatives, guide incident response efforts, and partner across the organization to build security into everything we do. This role serves as the senior security leader for the company, providing technical and strategic guidance to leadership while ensuring security supports business objectives. Key Responsibilities Develop and execute Stuller's information security strategy, roadmap, and governance program aligned with business objectives, NIST Cybersecurity Framework (CSF), and PCI-DSS requirements.Lead, mentor, and develop a team of security analysts and engineers while fostering a culture of accountability, collaboration, and continuous improvement.Own the incident response program, including major incident coordination, post-incident reviews, and ongoing readiness through tabletop exercises and security testing.Oversee security operations, including threat detection, monitoring, vulnerability management, threat hunting, and managed security service providers.Manage enterprise cyber risk, security policies, standards, vendor assessments, and third-party risk reviews.Lead PCI-DSS compliance efforts, audit readiness activities, remediation planning, and interactions with internal and external auditors.Partner with IT and business teams to integrate security into infrastructure, cloud, application development, and project initiatives.Manage security budgets, vendor relationships, contracts, and technology investments.Establish security metrics and reporting that communicate risk, program effectiveness, and business impact to leadership.Support business continuity, disaster recovery, and organizational resilience initiatives. Basic Qualifications Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or a related field, or equivalent combination of education and experience.7+ years of information security experience, including 5+ years in a leadership role.Experience developing, managing, or maturing an enterprise information security program.Strong knowledge of security frameworks, risk management practices, and compliance requirements, including PCI-DSS and NIST CSF.Experience leading security incident response efforts and coordinating with internal stakeholders and third-party partners.Demonstrated ability to communicate technical risks and recommendations to executive leadership.Experience managing security budgets, vendors, and managed security service providers.Working knowledge of SIEM, EDR/XDR, identity management, network security, cloud security, and security operations processes.Understanding of modern cyber threats, attack techniques, and mitigation strategies.Strong leadership, decision-making, and communication skills with the ability to perform effectively during high-pressure situations. Preferred Qualifications Master's degree in Cybersecurity, Information Assurance, Computer Science, Business Administration, or a related field.Professional certifications such as CISSP, CISM, CISA, CRISC, GCIH, GCIA, or similar credentials.Experience leading SOC transformations, implementing managed detection and response (MDR) programs, or supporting large-scale cloud initiatives.Familiarity with security automation, detection engineering, threat intelligence, and scripting technologies such as Python or PowerShell.Experience overseeing penetration testing, red/purple team exercises, security awareness programs, and executive tabletop exercises.Experience within highly regulated environments or organizations with mature compliance requirements. This position requires candidates to have unrestricted work authorization in the United States without the need for visa sponsorship, either currently or in the future.