Information Security; InfoSec) Operations Manager

Position: Information Security (InfoSec) Operations Manager

We are seeking an experienced Security Operations Manager to lead and continuously improve the security operations program for an established law firm (AmLaw 200). This individual will oversee security monitoring, incident response, vulnerability management, security technologies, and operational risk reporting to help protect enterprise systems, personnel, and highly confidential client information.

Reporting to the Director of Information Security, the Security Operations Manager will lead security personnel and external service providers while partnering with IT, Legal, Privacy, Risk Management, and business leadership. The ideal candidate combines strong technical knowledge with proven leadership skills, sound judgment, and the ability to communicate security risks effectively to both technical and executive audiences.

Key Responsibilities

• Lead security operations, including threat monitoring, detection, incident investigation and response, containment, recovery, and post-incident reviews.
• Maintain incident response plans, playbooks, escalation procedures, and readiness for high-severity security events.
• Oversee vulnerability management, including risk-based prioritization, remediation tracking, exception management, and reporting.
• Manage and optimize enterprise security technologies, including SIEM, SOAR, EDR/XDR, email security, identity protection, network security, cloud security, and data protection solutions.
• Develop operational dashboards and executive reporting covering incident trends, response effectiveness, vulnerability exposure, control performance, and emerging risks.
• Lead security awareness initiatives, including training, phishing simulations, and targeted education.
• Coordinate security testing, tabletop exercises, audits, client security inquiries, and risk assessments.
• Manage security staff, contractors, and managed security service providers, including performance, service delivery, budgeting, licensing, and resource planning.
• Provide security guidance on technology initiatives, architecture, integrations, vendor services, and significant changes.

Qualifications

• Bachelor’s degree in cybersecurity, information technology, computer science, or a related field, or an equivalent combination of education and experience.
• 10+ years of progressive information security experience, including at least five years leading security operations, incident response, security engineering, or a comparable function.
• Demonstrated experience leading personnel and managing external security providers and enterprise security technologies.
• Strong knowledge of incident response, threat detection, vulnerability management, security controls, and common attacker techniques.
• Hands-on understanding of SIEM, SOAR, EDR/XDR, identity and access management, network security, cloud security, and vulnerability management tools.
• Familiarity with NIST, ISO 27001/27002, CIS Controls, and MITRE ATT&CK frameworks.
• Experience developing operational metrics, procedures, and executive-level risk communications.
• Strong communication, project management, vendor management, and risk-based decision-making skills.
• CISSP, CISM, GIAC, Security+, or another relevant security certification preferred.

Preferred Experience

Experience in a law firm, professional services organization, or regulated environment with demanding client confidentiality, privacy, and security obligations is highly desirable.

Work Arrangement

This is a remote position requiring candidates to reside in the Dallas metropolitan area. Periodic travel to a firm office or other locations is required for meetings, training, incident response, and business needs. Evening or weekend availability may be required for significant incidents, maintenance, or other operational needs.

Featured benefits

• Medical insurance
• Vision insurance
• Dental insurance
• 401(k)
• Tuition assistance

Requirements added by the job poster

• 7+ years of work experience with IT Security Operations
• 1+ years of Law Practice experience