Information Security Operations Manager

We are seeking an Information Security Operations Manager to lead our Information Security Analyst Team in Global Technology & Operations. This role is based at our Nashville, TN headquarters, four days in the office and one day remote each week. This is not an entry-level position. The Information Security Operations team is responsible for safeguarding Alliance Bernstein’s technology and information assets.

The team’s primary focus is on identifying threats, monitoring, and responding to security events and enhancing the firm’s security posture. The Information Security Operations team operates as part of Infrastructure Risk Management (IRM), a department within Global Technology and Operations that is responsible for an enterprise-wide integrated infrastructure risk management program which employs a holistic approach to manage cybersecurity, information security, data privacy, physical security and business continuity led by the Chief Security Officer.

This role reports to the Director of Information Security Risk and Operations.

As the Information Security Operations Manager, you will perform a critical role working side by side with information security analysts as a hands‑on player/coach, providing guidance, coaching, and training. You will also collaborate with other corporate business units including but not limited to global enterprise infrastructure and technology, corporate compliance, security assurance, global technology operations and other infrastructure risk business units.

This position leads a team that provides information security analysis services, incident response services, and ultimately information risk management support to the business. Specifically, this team acts as an incident response team and control group to ensure that security operational procedures are performed, and risks are addressed in a timely manner. This team maintains a 24/7/365 on‑call rotation. Lead the daily operations of the information security operations program, aligning business objectives and risk tolerance.

Develop, implement, and continuously improve security procedures. Actively participate in incident response and threat detection alongside the team, serving as a hands‑on escalation point and ensuring rapid and effective resolution. Track and report on key security metrics (e.g., MTTD, MTTR) to leadership. Collaborate with IT, legal, compliance, privacy, and executive teams for holistic risk management. Leverage automation and threat intelligence to enhance security operations.

Manage vendor relationships. Coach and mentor analysts through hands‑on support, including real‑time incident handling, threat hunting, and query development.

Ideally 8+ years’ experience in Information Security and/or Information Technology in an operations role Minimum of 6 years prior experience in a role exclusively responsible for information security incident response Prior experience managing or leading people on an information security team Experience leading incident response in a global environment, including hands‑on triage, investigation, and containment alongside the team Willingness to participate in the 24/7/365 on‑call rotation alongside the team.

This is a hands‑on manager position. Experience building and maintaining SOAR playbooks. Fluency with Splunk Processing Language [SPL], YARA- L, and Kusto Query Language [KQL] Experience working with JIRA, Service Now or similar platforms Experience working with DLP platforms Experience creating, collecting, and assembling metrics for reporting Experience working with hybrid (on‑prem and Cloud) technology platforms and applications Extensive experience securing and/or troubleshooting…