Cyber Operations Supervisor

MSC B 1st Floor
4400 Central Way
Building B Floor 2
Chubbuck, , USA

The Cyber Operations Supervisor reports to the CISO and oversees a team of Information Security Analysts and Information Security Engineers responsible for defending ICCU’s information systems and technology environments. This leader is accountable for the development, maturation, and delivery of world‑class cyber defense capabilities that protect the Credit Union from evolving threats and enhance enterprise resilience. The role oversees and delivers an optimal mix of cyber defense technologies, platforms, and third parties to drive effective security monitoring, threat detection, investigation, incident response, and recovery capabilities.

In partnership with the CISO and other leaders, the Cyber Operations Supervisor helps establish strategic priorities in support of the ICCU Information Security Program and strengthens ICCU’s ability to anticipate, withstand, respond to, and recover from cyber threats.

• Manage, oversee, and prioritize ICCU’s cyber operations activities, including security monitoring, alert triage, investigation, escalation, incident response, and recovery coordination.
• Oversee the daily work and operational effectiveness of Information Security Analysts and Information Security Engineers, ensuring high quality execution, appropriate prioritization, and timely resolution of cyber threats, events, and operational issues.
• Lead the development, tuning, and continuous improvement of cyber detection, alerting, monitoring, and response capabilities across ICCU’s information systems and technology environments, including efforts to reduce false positives, minimize false negatives, and improve the accuracy and effectiveness of cyber defense operations.
• Oversee and deliver an optimal mix of cyber defense technologies, platforms, and third parties to support effective security operations, visibility, investigation, containment, and recovery.
• Oversee and optimally integrate SOCaaS and MDR services into ICCU’s cyber operations to enhance monitoring coverage, detection effectiveness, escalation workflows, investigation support, and incident response coordination.
• Coordinate and oversee the investigation of security events, incidents, suspicious activity, and potential intrusions, ensuring appropriate documentation, escalation, communication, and follow‑through.
• Provide oversight of ICCU’s incident response program and related governance, ensuring the ongoing maturity, maintenance, testing, and continuous improvement of incident response policies, plans, procedures, escalation pathways, communication protocols, and coordination mechanisms.
• Direct cyber operations efforts related to threat detection, threat hunting, security systems tuning, and the identification of anomalous or malicious activity across endpoint, network, identity, cloud, and application environments.
• Oversee the administration, health, integration, and effectiveness of operational security technologies such as SIEM, EDR, IDS/IPS, email security, vulnerability management systems, security logging and monitoring platforms, SOAR capabilities, AI‑enabled security capabilities, and other defensive technologies.
• Champion an industry‑leading and risk‑balanced approach to leveraging AI capabilities across cyber operations, advancing secure and effective use of AI to improve detection, investigation, response, automation, and operational scale while ensuring appropriate governance, transparency, human oversight, and alignment with ICCU policies and risk tolerance.
• Partner with infrastructure, network, systems, cloud, application, fraud, risk, and business teams to improve defensive controls, strengthen security operations processes, and support secure business growth.
• Provide technical and operational leadership in the evaluation, implementation, configuration, and improvement of cyber defense tools, integrations, workflows, and supporting processes.
• Oversee the creation, maintenance, and continual improvement of operational procedures, technical documentation, response workflows, playbooks, and reporting related to cyber operations.
• Lead and develop…