Sr Manager IT, Security Operations

Senior Manager, Security Operations

The Senior Manager, Security Operations is responsible for the strategy, governance, and operational oversight of Mattel's global Security Operations program. This role provides organizational leadership and strategic direction to ensure the effective detection, investigation, response, and recovery from cybersecurity threats across Mattel's global enterprise.

As a senior cybersecurity leader, this position owns Mattel's enterprise Security Operations capability, delivered through a combination of internal cybersecurity teams and strategic Managed Detection and Response (MDR) service providers. The role is accountable for Security Operations governance, cyber incident response, cyber investigations, threat intelligence, detection engineering, identity threat detection, and third‑party security incident management while ensuring operational excellence across endpoint, identity, cloud, and third‑party environments.

• Lead Mattel's global Security Operations program, including strategic oversight of Managed Detection and Response (MDR) services, cyber incident response, cyber investigations, threat intelligence, detection engineering, and Security Operations governance.
• Define and execute the strategic roadmap for Security Operations, aligning with Mattel's cybersecurity strategy, enterprise architecture, cloud transformation, and business priorities.
• Lead and develop a high‑performing Security Operations organization responsible for strategic planning, governance, cyber incident leadership, engineering, and vendor management.
• Establish governance, operational standards, playbooks, and best practices for enterprise detection, investigation, response, and operational excellence.
• Drive continuous improvement of Security Operations maturity through automation, AI, operational metrics, intelligence‑led operations, and process optimization.
• Develop and manage Security Operations budgets, resource planning, vendor investments, and strategic initiatives.
• Build organizational capabilities that support Mattel's long‑term cybersecurity strategy and evolving operating model.
• Present Security Operations posture, service performance, cyber risk, and strategic initiatives to executive leadership and cybersecurity governance forums.
• Influence cross‑functional stakeholders to align Security Operations priorities with enterprise risk management and business objectives.

• Own the strategy, governance, and operational performance of Mattel's Managed Detection and Response (MDR) services.
• Lead operational governance of one or more strategic MDR providers, ensuring alignment with Mattel's cybersecurity strategy and risk objectives.
• Define service‑level objectives (SLOs), key performance indicators (KPIs), escalation procedures, operational playbooks, and service governance processes.
• Define and maintain clear operational ownership, escalation paths, and decision authority between internal cybersecurity teams and external MDR providers.
• Conduct regular operational reviews and Quarterly Business Reviews (QBRs) with MDR providers to continuously improve detection quality, investigation effectiveness, response performance, and overall service maturity.
• Coordinate high‑severity cybersecurity incidents jointly with MDR providers and Mattel's internal technology, infrastructure, identity, cloud, legal, privacy, and business teams.
• Evaluate service provider performance through operational metrics such as Mean Time to Detect (MTTD), Mean Time to Respond (MTTR), detection quality, investigation effectiveness, SLA compliance, escalation effectiveness, and overall customer experience.
• Lead service transitions, continuous improvement initiatives, and operational enhancements as Mattel evolves its Security Operations capabilities.
• Manage strategic vendor relationships, contracts, and operational performance to ensure consistent delivery of high‑quality Security Operations services.

• Lead Mattel's response to cybersecurity incidents involving third‑party vendors, SaaS providers, cloud service providers,…