Information Security Operations Lead

Ready to own and evolve a cybersecurity program ? This role offers executive visibility, strategic influence, and the opportunity to strengthen enterprise security from the ground up.

FT

Onsite in CT

130-155K

Risk management, RMF, risk assessments, vulnerability assessments and scans, and penetration tests, leadership and hands-on. Small team

We are seeking an Information Security Operations Specialist to lead and strengthen its cybersecurity program. This leadership role is responsible for overseeing security operations, risk management, incident response, regulatory compliance, and vendor security to ensure a resilient and secure enterprise environment. This is an individual contributor role that will be a combination of leadership and being hands-on.

Key Responsibilities

• Lead execution of enterprise-wide cybersecurity initiatives and security operations
• Oversee audits, assessments, and testing of the cybersecurity environment
• Manage security project planning, budgeting, documentation, and vendor coordination
• Establish and enforce security policies, procedures, and technical controls across networks, systems, and applications
• Conduct risk assessments, vulnerability scans, penetration testing, and fraud investigations
• Lead incident response efforts, including threat detection, investigation, containment, and recovery
• Develop and maintain incident response plans and forensic processes
• Ensure compliance with regulatory and government cybersecurity standards
• Oversee third-party/vendor security assessments and risk management processes
• Develop and manage security awareness programs for employees and stakeholders
• Provide reporting and updates to executive leadership and the board on cybersecurity posture and compliance

Qualifications

• Strong experience in information security operations within a regulated environment (financial services preferred)
• Expertise in risk management frameworks (RMF), vulnerability management, and incident response
• Experience managing audits, regulatory compliance, and third-party security reviews
• Knowledge of current cybersecurity threats, tools, technologies, and best practices
• Proven leadership skills with the ability to collaborate cross-functionally and influence stakeholders
• Strong analytical, documentation, and executive-level communication skills