Director, Security Operations Enablement

• Own and lead the Security Operations Enablement function covering Data Engineering, Data Analytics, and SIEM/SOAR engineering
• Define and deliver the strategic roadmap for Security Operations platforms and capabilities
• Manage and develop a global team of 20+ engineering resources
• Govern the lifecycle of Security Operations technologies, including selection, implementation, optimization, and decommissioning
• Ensure availability, performance, and continuous improvement of data pipelines, detection engineering, and automation capabilities
• Partner with GCDC and Incident Response leadership to translate operational requirements into technical solutions
• Collaborate with Security Engineering and Enterprise Architecture on target-state architectures
• Drive infrastructure as code, CI/CD, and scalable automation frameworks
• Establish and maintain vendor relationships and ensure value realization from strategic partners
• Define and track performance metrics for Security Operations technologies
• Lead governance, risk, and compliance activities for enablement platforms
• Contribute to tactical and strategic decision-making within the Information Security Office
• Support adoption of advanced analytics, AI, and automation capabilities within Security Operations

• 10+ years of experience in Cyber Security Engineering, Security Operations, or a related field
• Demonstrable experience leading engineering teams delivering large-scale security platforms, such as SIEM, SOAR, and data platforms
• Strong understanding of Security Operations processes, including detection, triage, and response workflows
• Proven ability to define and execute technology strategy in complex, global organizations
• Experience managing and developing high-performing engineering teams in a distributed environment
• Excellent stakeholder management and communication skills with technical and non-technical audiences
• Strong analytical and problem-solving capabilities with a data-driven approach
• Experience working with security vendors and managing strategic partnerships
• Ability to operate at tactical and strategic levels
• Familiarity with cloud platforms, modern data architectures, and scalable engineering patterns
• Preferred: experience in Security Architecture or close collaboration with architecture functions
• Preferred: knowledge of enterprise integration patterns and large-scale data engineering frameworks
• Preferred: experience delivering or supporting AI/automation initiatives within Security Operations
• Preferred: financial services or highly regulated industry experience

Demonstrates expertise in leading Security Operations Enablement, focusing on Data Engineering, Data Analytics, and SIEM/SOAR engineering. Proven ability to manage high-performing global teams while driving technology strategy and governance in complex environments.

• Cyber Security Engineering
• Security Operations Management
• SIEM/SOAR Platforms
• Data Pipeline Optimization
• Stakeholder Management

• Security Operations Processes
• Detection Engineering
• Automation Capabilities
• Infrastructure as Code
• CI/CD
• Data Analytics
• Advanced Analytics
• AI Implementation
• Cloud Platforms
• Data Engineering Frameworks

• Leadership
• Communication Skills
• Analytical Problem-Solving
• Collaboration
• Stakeholder Engagement

• Governance
• Risk Management
• Compliance
• Financial Services
• Regulated Industry

• SIEM
• SOAR
• Data Platforms
• Automation Frameworks
• Vendor Management