Manager of Security Operations and Infrastructure

Schellman is a Top 50 CPA firm and a leading provider of attestation and compliance services. Our professional services focus on security and privacy audits, assessments, and certifications. Schellman has become one of the largest cybersecurity assessment firms in the United States without providing any traditional accounting services. We are an accredited multi-framework ISO Certification Body for security, privacy, business continuity, and quality;

a globally licensed PCI Qualified Security Assessor and a top provider to clients serving the federal DoD space as a leading FedRAMP 3

PAO and the first assessment firm authorized as a CMMC C3

PAO. Our specialty and expertise remain in providing best in class Cybersecurity and IT Audits and Attestations. Our culture, approach with clients, and dedication to our values has led us to consistently be a Great Places to Work certified company and rated as a Best Firms to Work For by Accounting Today and a Glassdoor Best Places to Work. We deeply appreciate our employees, as shown by our first core value – People Come First.

This is demonstrated in our culture, benefits, and how we handle business. Come see what makes Schellman special!

The Manager of Security Operations & Infrastructure is a hands‑on player‑coach leadership role responsible for the security and operational integrity of Schellman's technology infrastructure. This role oversees the Security Operations (Sec Ops) and Dev Ops functions, with a primary emphasis on building and maturing the Sec Ops program. This role reports to the Director of IT and is a key member of the CTO organization, contributing to IT strategy, security governance, and cross‑functional initiatives across a ~500‑person professional services firm.

• Lead and mature Schellman's Sec Ops program, including threat detection, incident response, vulnerability management, and security monitoring
• Own the day‑to‑day operations of security tooling across the environment, including EDR, SIEM, and related platforms
• Drive security incident response processes, including escalation procedures, post‑incident reviews, and continuous improvement
• Partner with Compliance and Risk teams to support internal security controls and other frameworks relevant to Schellman's operations
• Manage and develop Sec Ops Engineers, providing mentorship, prioritization support, and career growth opportunities
• Lead vulnerability management efforts including prioritization, remediation tracking, and executive reporting
• Provide management oversight for the Dev Ops team
• Partner with the Senior Dev Ops Engineer on technical direction, infrastructure decisions, and delivery execution — leveraging their expertise while providing organizational leadership and prioritization support
• Champion security integration across the Dev Ops lifecycle, including CI/CD pipeline security, IaC security standards, and cloud security posture management
• Support cloud security operations across AWS and Microsoft Azure environments
• Serve as a key stakeholder in Schellman's IT governance and AI governance programs
• Collaborate with the Director of IT and CTO on security strategy, roadmap planning, and budget inputs
• Represent the Sec Ops and Dev Ops functions in cross‑departmental initiatives
• Communicate security posture, risks, and program updates clearly to IT leadership and non‑technical stakeholder

• 5+ years of experience in security operations, cybersecurity engineering, or a related discipline
• 1–3 years of people management or formal team lead experience
• Strong working knowledge of Sec Ops domains: SIEM, EDR, incident response, threat intelligence, and vulnerability management
• Familiarity with Dev Ops concepts and cloud infrastructure —…