Director, Security Operations Enablement

American International Group, Inc. (AIG) is a leading global insurance organization. AIG member companies provide a wide range of property casualty insurance in approximately 70 countries and jurisdictions. These diverse offerings include products and services that help businesses and individuals protect their assets and manage risks.

We're also committed to making a positive difference for our colleagues and in the communities where we work and live. We encourage colleagues to give back to the causes they care most about, supporting these efforts through our Volunteer Time Off and Matching Grants Programs.

At AIG, technology is at the heart of everything we do, from underwriting risks to processing claims. The Information Technology team equips our colleagues with the latest tools to complete their work efficiently and with the highest standards of excellence. The team is responsible for shielding the company’s systems from security risks, while designing technology strategies that enable AIG's businesses to achieve their goals.

AIG's Information Technology functions include enterprise architecture, software and systems engineering, cybersecurity, and technology risk and compliance.

The Director of Security Operations Enablement is a senior leadership role responsible for the engineering and enablement functions that underpin Security Operations. This includes ownership of Data Engineering, Data Analytics, and SIEM/SOAR engineering capabilities, ensuring that platforms, data pipelines, and automation solutions effectively support detection and response outcomes. This role manages a global team of engineering professionals and is accountable for the delivery, performance, and governance of Security Operations technologies and services.

The successful candidate will define and execute the strategic roadmap for Security Operations enablement, in alignment with the direction set by the Head of Security Operations, Deputy CISO, and CISO. Working closely with peer leaders across Incident Response, Global Cyber-risk Defense Center (GCDC), Cyber Threat Management, and Security Engineering, this role ensures that operational requirements are translated into scalable, resilient, and future-ready technical capabilities.

The role also plays a key part in shaping target state architecture, collaborating with Enterprise Security Architecture to align engineering delivery with broader strategic objectives.

• Own and lead the Security Operations Enablement function, covering Data Engineering, Data Analytics, and SIEM/SOAR engineering
• Define and deliver the strategic roadmap for Security Operations platforms and capabilities, ensuring alignment with organizational cyber defense priorities
• Manage and develop a global team of 20+ engineering resources, fostering a high-performance and engineering-led culture
• Govern the lifecycle of Security Operations technologies, including platform selection, implementation, optimization, and decommissioning
• Ensure the availability, performance, and continuous improvement of data pipelines, detection engineering, and automation capabilities
• Partner with GCDC and Incident Response leadership to understand operational requirements and translate them into technical solutions
• Collaborate with Security Engineering and Enterprise Architecture to define and implement target state architectures
• Drive the adoption of modern engineering practices, including infrastructure as code, CI/CD, and scalable automation frameworks
• Establish and maintain vendor relationships, influencing product direction and ensuring value realization from strategic partners
• Define and track performance metrics for Security Operations technologies, leveraging data-driven insights to improve outcomes
• Lead governance, risk, and compliance activities related to enablement platforms, ensuring alignment with enterprise standards
• Act as a key contributor to tactical and strategic decision-making within the Information Security Office
• Support innovation initiatives, including the adoption of advanced analytics, AI, and automation capabilities within Security Operations

• 10+ years of experience in Cyber Security Engineering, Security Operations, or a related field
• Demonstrable experience leading engineering teams delivering large-scale security platforms (e.g. SIEM, SOAR, data platforms)
• Strong understanding of Security Operations processes, including detection, triage, and response workflows
• Proven ability to define and execute technology strategy in complex, global organizations
• Experience managing and developing high-performing engineering teams in a distributed environment
• Excellent stakeholder management and communication skills, with the ability to engage both technical and non-technical audiences
• Strong analytical and problem-solving capabilities, with a data-driven approach to decision making
• Experience working w