Security Operations Manager

The Custom Group of Companies

New York, NY

JOB DETAILS
SALARY
$120,000–$130,000 Per Year
SKILLS
Access Control, Amazon Web Services (AWS), Best Practices, Budgeting, Business Support, CCSP - Cisco Certified Security Professional, CISM - Certified Information Security Manager, CISSP - Certified Information Systems Security Professional, Cloud Architecture, Cloud Computing, Communication Skills, Computer Security, Continuous Improvement, Cross-Functional, Ecosystems, Email Security, Endpoint Security, Enterprise Protection, ISO (International Organization for Standardization), Identity Data Management, Incident Management, Incident Response, Information Technology & Information Systems, Information/Data Security (InfoSec), Leadership, Machine Tool, Mentoring, Metrics, Microsoft Access Database, Microsoft Product Family, Network Security, Operations Management, Operations Processes, Operations Security (OPSEC), Product Engineering, Regulatory Compliance, Regulatory Requirements, Reporting Skills, Requirements Management, Risk, Risk Management, Security Architecture, Security Information and Event Management (SIEM), Security Infrastructure, Security Monitoring, Strategic Planning, Technical Operations, U.S. National Institute of Standards and Technology (NIST), Usability Engineering
LOCATION
New York, NY
POSTED
30+ days ago
Overview
We are seeking an experienced Security Operations Manager to lead and mature our security operations program across technology, engineering, and business functions. This role is ideal for a hands-on security leader who brings the technical depth of an Information Security Manager while also understanding how security enables the business.
You will own day-to-day security operations while partnering closely with IT, Engineering, Compliance, and business stakeholders to design scalable, practical, and risk-based security solutions. The ideal candidate understands security from all angles operations, engineering, and administration and is highly proficient in Microsoft O365 environments and cloud infrastructure, particularly AWS.

Key Responsibilities
Security Operations & Leadership
  • Lead and manage security operations, including incident response, vulnerability management, access control, and security monitoring.
  • Build and mature operational security processes, runbooks, and metrics to support a growing organization.
  • Serve as escalation point for security incidents, coordinating response activities and post-incident reviews.
  • Develop and enforce security policies, standards, and procedures aligned with business objectives.
Technical & Engineering Oversight
  • Partner with engineering and infrastructure teams to design and implement secure architectures across cloud and enterprise environments.
  • Oversee security tooling and integrations (SIEM, endpoint protection, identity platforms, etc.).
  • Drive vulnerability remediation efforts across infrastructure and applications.
  • Ensure secure configuration and continuous improvement of cloud environments, particularly on Amazon Web Services.
Microsoft O365 & Identity Management
  • Act as a subject matter expert for Microsoft O365 security capabilities, including identity, access, email security, and collaboration platforms.
  • Manage and optimize conditional access, MFA, data protection, and security policies.
  • Collaborate with IT on user lifecycle management, permissions, and administrative controls within the Microsoft ecosystem.
Business Enablement & Risk Management
  • Translate technical security risks into business impact for leadership and stakeholders.
  • Partner with Compliance, Legal, and Risk teams to support audits, assessments, and regulatory requirements.
  • Balance security controls with operational efficiency, ensuring solutions are practical, scalable, and business-aligned.
  • Help define security roadmaps, budgets, and strategic initiatives.
Team & Stakeholder Collaboration
  • Mentor and guide security and IT staff on best practices.
  • Work cross-functionally with Product, Engineering, Operations, and Executive teams.
  • Provide clear reporting on security posture, risks, and improvements to leadership.

Required Qualifications
  • 5+ years of progressive experience in Information Security, including hands-on operational leadership.
  • Proven experience managing security operations across enterprise and cloud environments.
  • Deep practical knowledge of:
    • Microsoft O365 security and administration
    • AWS cloud security architecture and controls
    • Identity and access management
    • Incident response and vulnerability management
  • Strong understanding of security engineering concepts (network security, endpoint security, cloud security, logging/monitoring).
  • Experience building security programs that support business objectives.
  • Ability to communicate complex technical topics to non-technical stakeholders.
  • Demonstrated experience balancing security, usability, and operational needs.

Preferred Qualifications
  • Prior experience as an Information Security Manager or Security Operations Lead.
  • Familiarity with compliance frameworks (ISO 27001, SOC 2, NIST, etc.).
  • Experience implementing or managing SIEM, EDR, and cloud security tooling.
  • Security certifications (CISSP, CISM, CCSP, or similar).
  • Experience leading small to mid-sized security teams.

What Success Looks Like
  • Security operations run smoothly with clear processes and measurable outcomes.
  • Cloud and O365 environments are well-secured, monitored, and continuously improved.
  • Incidents are handled efficiently with minimal business disruption.
  • Stakeholders view security as a trusted business partner not a blocker.
  • The organization's overall security maturity steadily increases under your leadership.

About the Company

T

The Custom Group of Companies