Cybersecurity Operations Manager

NOTE:
Individual(s) must be legally authorized to work in the United States without the need for immigration support or sponsorship from Milliman now or in the future.

The Cybersecurity Operations Manager leads the day-to-day delivery and continuous improvement of Milliman's global security operations capabilities. This role manages security operations analysts and security engineers responsible for threat monitoring, detection, investigation, containment, and remediation; incident response management and triage; maintenance of incident response standards; and the planning and delivery of tabletop exercises. The team also maintains the platforms and controls that protect the organization.

Reporting to the Chief Information Security Officer (CISO), this position combines people leadership, technical depth, operational discipline, and cross-functional partnership. The manager owns team performance, workforce planning, annual reviews, professional development, operational metrics, technology lifecycle management, and the execution of security initiatives across a geographically distributed organization. The role works closely with IT Operations, Infrastructure, Privacy, Risk, Compliance, Legal, and business stakeholders to strengthen resilience, reduce risk, and enable secure business operations.

• Manage the operation and lifecycle of SIEM, EDR, security scanning, firewall, secure web gateway, and related security technologies.
• Manage Security Operations Analysts and Security Engineers, including performance management, annual reviews, workload oversight, and professional development.
• Establish operating procedures, escalation paths, on-call expectations, and service levels, and support the delivery of artifacts for internal and external security audits.
• Develop and maintain dashboards, key performance indicators, risk indicators, and executive reporting that demonstrate operational performance, control effectiveness, exposure, and trends.
• Partner with infrastructure, cloud, identity, network, endpoint, application, and privacy teams to embed security requirements and improve preventive, detective, and responsive controls.
• Lead security projects and cross-functional initiatives, balancing operational priorities with strategic commitments and ensuring clear ownership, communication, and delivery.

• The ideal candidate must have minimum 8 years of business experience in the areas of Information Security.
• The ideal candidate must have working knowledge of auditing, policy, database and firewall security, risk analysis, identity and access management, and web services.
• The ideal candidate must have prior experience supervising and professional development of staff in the Information Security field.
• Must have prior experience working with geographically diverse offices in a global organization.
• Must have the ability to interpret information security data and processes to identify potential compliance issues.
• Must have Knowledge of security and control frameworks such as ISO 27001/27002, NIST Cybersecurity Framework, NIST SP 800-53, HIPAA, and HITRUST.

• This is a remote role. This job posting is expected to close on November 13th, 2026

The overall range for this role is $150,348 - $285,274. For candidates residing in:

• Alaska, California, Connecticut, Illinois, Maryland, Massachusetts, New Jersey, New York City, Pennsylvania, Virginia, Washington, or the District of Columbia the range is $172,900 - $285,274.
• All other locations the range is $150,348 - $248,064.

A combination of factors will be considered, including, but not limited to, education, relevant work experience, qualifications, skills, certifications, etc.

• Medical,…