Manager, Information Security (Hybrid)

The Manager, Information Security, leads the organization’s information security operations and is responsible for protecting enterprise systems, data, and technology platforms from evolving cybersecurity threats. This role provides strategic and hands-on leadership for the Security Operations Center (SOC), including threat detection, incident response, vulnerability management, security technologies, and team development., * Lead the Security Operations Center (SOC) and execute the organization’s security operations strategy and roadmap.

• Direct cybersecurity incident response and breach investigations, including detection, containment, recovery, and reporting.
• Oversee security monitoring, threat detection, threat intelligence, vulnerability management, and threat-hunting activities.
• Lead the implementation and optimization of enterprise security technologies, including SIEM, EDR/XDR, IAM/PAM, IDS/IPS, cloud security, and vulnerability-management platforms.
• Partner with Infrastructure, Cloud, Development, Legal, Procurement, and business teams to integrate security requirements into technology solutions and business processes.
• Manage security vendors, technology partners, audits, and operational security services.
• Develop and report cybersecurity metrics, KPIs, security trends, and program effectiveness to leadership.
• Lead, mentor, and develop security professionals while providing technical guidance and escalation leadership for significant security incidents.

Information/Data Security (InfoSec), Leadership, Team Building, Internet Security, Computer Security, Incident Response, Information/Data Security (InfoSec), Operational Strategy, Direct Response Advertising, Security Monitoring, * Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, or equivalent relevant experience.

• 7+ years of progressive cybersecurity or information security experience, including significant experience in Security Operations, Security Engineering, or incident response.
• Demonstrated experience leading security professionals or technical cybersecurity teams.
• Hands-on experience with SIEM/SOAR platforms such as Rapid7, CrowdStrike, or comparable technologies.
• Working knowledge of EDR/XDR, IAM/PAM, vulnerability management, cloud security, WebApp firewalls, IDS/IPS, DLP, and related enterprise security technologies.
• Knowledge of cybersecurity frameworks and standards such as NIST CSF, , ISO 27001, and CIS 18 Controls.
• CISSP, CISM, GCIH, CEH, AWS Security, Microsoft Security, or comparable certification preferred.

Hiring Range: $109,700 to $138,220

This position is also eligible for participation in AAA, Inc.’s Associates Incentive Plan.

AAA, Inc. is committed to paying competitively and equitably. The posted range for this position represents competitive compensation based on market data, internal equity, and the skills and requirements of the position. The compensation offered will depend on your qualifications and experience.