Note: The job is a remote job and is open to candidates in USA. MRO is seeking a strategic, metrics-driven Director of Information Security Operations to lead the execution and operational performance of its information security program. The role will build and manage a high-performing security team, oversee security operations and cybersecurity initiatives, and use KPIs and measurable outcomes to improve vulnerability management, incident response, control effectiveness, and business alignment.
Responsibilities
- Security Operations Leadership: Direct and oversee all aspects of security operations, including monitoring, incident response, threat intelligence, vulnerability management, and operational readiness
- KPI and Metrics Ownership: Define, maintain, and continuously improve security KPIs, KRIs, dashboards, and scorecards that measure team performance, SLA adherence, remediation progress, incident response effectiveness, backlog health, control effectiveness, and security risk reduction
- High-Performance Team Management: Set clear expectations, establish measurable goals, coach team members, improve execution consistency, and create a culture of ownership, urgency, accountability, and continuous improvement
- Operating Rhythm and Accountability: Lead recurring operational reviews that evaluate performance against targets, identify blockers, assign ownership, track commitments, and ensure follow-through on prioritized work
- Security Monitoring: Implement and manage security monitoring tools and technologies to detect, measure, and respond to security threats in real time
- Threat Intelligence: Stay abreast of emerging threats and vulnerabilities. Use threat intelligence to enhance defensive strategies, improve detection capability, and strengthen incident response readiness
- Vulnerability Management: Manage the vulnerability assessment and remediation process. Ensure timely identification, prioritization, ownership assignment, SLA tracking, and mitigation of security vulnerabilities
- Security Incident Investigation: Conduct thorough investigations of security incidents, determine root causes, define corrective actions, and track completion of improvements to prevent recurrence
- Collaboration and Communication: Collaborate effectively with IT, compliance, legal, engineering, product, and executive leadership to align security initiatives with business objectives and communicate progress through clear, outcome-focused reporting
- Information Security Program Execution: Lead infrastructure and cybersecurity initiatives, including network security, server and storage security, endpoint security, cloud security, and related operational controls
- Continuous Improvement: Identify opportunities for automation, process improvement, workflow optimization, and measurable risk reduction across the information security program
Skills
- Experience leading and maturing an information security program with measurable outcomes, clear operating rhythms, and defined performance expectations
- Proven ability to define, implement, and manage cybersecurity KPIs, KRIs, dashboards, scorecards, SLAs, and operational performance reporting
- Demonstrated experience building, coaching, and leading high-performing teams with strong execution discipline, accountability, and measurable goals
- Advanced understanding of the competencies of the 8 Domains of the CISSP
- Track record of completing projects related to assessments, risk reduction, control improvement, vulnerability remediation, and security mitigation
- Ability to communicate security performance and risk to varied audiences, including end users, technical teams, business leaders, and executives
- Strong critical thinking, problem-solving, prioritization, and decision-making skills
- Proven planning, organizing, communication, and follow-through skills with the ability to translate metrics into action and sustained performance improvement
- Bachelor's degree in Information Security, Computer Science, Information Technology, or related field
- 10+ years of cybersecurity experience, including 5+ years in a leadership role
- Experience leading enterprise cybersecurity programs within a Microsoft-centric environment
- Strong expertise with building meaningful dashboards and KPI's to measure operational success
- Experience with security operations, incident response, vulnerability management, cloud security, and identity management
- Knowledge of cybersecurity frameworks including but not limited to NIST, CIS Controls, and SOCII/HITRUST
- Proven ability to communicate technical concepts and risks to executive and business leaders
- Professional certifications such as CISSP, CISM, CRISC, CCSP
- Experience with AI platforms and services
- Experience in highly regulated organizations
Benefits
- Eligible employees may also receive an annual cash bonus
- Medical insurance
- Dental insurance
- Vision insurance
- Life insurance
- A 401(k) plan
- Remote work
Company Overview
Company H1B Sponsorship