Information Security Operations Lead​/Manager

Information Security Operations Lead / Manager

The Information Security Operations Lead/Manager will oversee the day‑to‑day operation of en Vista’s security tools and technologies, guide a team of Security Analysts, and lead initiatives to formalize security operations practices through automation.

• Coordinate day‑to‑day Security Operations activities including ticket and request handling, incident triage, escalation, containment and remediation.
• Ensure all requests are tracked and handled with the corresponding level of urgency.
• Accept and resolve the most complex security incidents that cannot be resolved by the IT Operations Team or less experienced Security Analysts.
• Lead incident response investigations, coordinate response activities, and update leaders while maintaining confidentiality.
• Oversee the daily configuration and maintenance of core security tools including EDR, NDR, email security solutions, and SIEMs.
• Respond to requests for investigations including eDiscovery requests and configuring records retention.
• Establish and document repeatable security operations processes and procedures and ensure they are followed by the Information Security Team.
• Implement automation for repetitive security response and maintenance activities.
• Support associated security activities including security engineering, threat hunting, vulnerability management, penetration tests, and GRC processes.
• Participate in the process to onboard new clients to en Vista’s managed security services.
• Frequent interface with vendors and service providers to ensure timely response to support requests and adherence to Service Level Agreements (SLAs).
• Coordinate industry information sharing organization relationships.
• Develop Security Operations metrics and reporting to management.
• Lead, mentor, and develop a team of Security Analysts with an aim to scale‑up in the future (Manager).
• Temporarily lead the Information Security team in the Director’s absence (Manager).
• Periodic travel to client sites, conferences, or industry events (Up to 20 %).

• Bachelor’s degree in Computer Science, Management Information Systems, Information Security, Cybersecurity, or a related field. A combination of equivalent experience and certifications will also be considered.
• 7 – 10+ years leading or working in a Security Operations Center or Incident Response Team (Manager).
• 5 – 7 years working in a Security Operations Center or Incident Response Team (Lead).
• At least one of the following certifications: CISSP, GSOM, GCIH, CISM, or OSCP.
• Experience leading information security incident response.
• Previous experience in implementing documented repeatable security operations processes.
• Experience working with EDR, MDR service providers, email security solutions, SOARs, and SIEMs.
• Experience with eDiscovery and information protection toolsets (e.g., Microsoft Purview).
• General understanding of security technologies including vulnerability management solutions, firewalls, IDS/IPS, CASB, NAC, DLP, VPNs, SSE, endpoint management solutions, PAM solutions, and general network/security concepts.
• Experience with security automation technologies and scripting languages (Python, JSON, YARA, TAXII/STIX, etc.).
• Prior experience working with Microsoft technologies including Active Directory (AD), Azure, Defender, Entra
  
  ID, Intune, Purview, and Sentinel.
• Familiarity with other security and technology platforms including Okta, Cisco Duo, AWS, and GCP.
• Exposure to control and security frameworks, particularly the AICPA Trust Service Criteria (SOC 2), ISO 27001, NIST CSF, and HIPAA/HITECH/HITRUST.
• Proficient with Microsoft Office Suite and Office 365 (Teams, SharePoint).
• Experience with in a Managed Security Service Provider (MSSP) environment.
• Ability to communicate and drive for optimal security outcomes across all levels of the organization and engage with current and prospective clients.
• Excellent verbal and written communication skills.
• Remain current with emerging cyber security threats and advise relevant stakeholders on the appropriate course of action.
• This position will be manager of people.
• The successful candidate will be required to be present, in‑person, Monday – Thursday in en Vista’s Carmel, Indiana office.

• Competitive Compensation & Bonuses
• Medical, Dental & Vision Insurance
• Paid Time Off, Holidays & Volunteer Days
• Life Insurance, Short/Long Term Disability
• Paid Sabbatical Program
• 401(k) with Company Matching
• Flexible Work Opportunities
• Paid Sabbatical After Seven Years of Service
• Employee Referral Bonus