Manager, Information Security (Hybrid)

Business Summary:

The Manager, Information Security, leads the organization’s information security operations and is responsible for protecting enterprise systems, data, and technology platforms from evolving cybersecurity threats. This role provides strategic and hands-on leadership for the Security Operations Center (SOC), including threat detection, incident response, vulnerability management, security technologies, and team development.

Key Responsibilities:

• Lead the Security Operations Center (SOC) and execute the organization’s security operations strategy and roadmap.
• Direct cybersecurity incident response and breach investigations, including detection, containment, recovery, and reporting.
• Oversee security monitoring, threat detection, threat intelligence, vulnerability management, and threat-hunting activities.
• Lead the implementation and optimization of enterprise security technologies, including SIEM, EDR/XDR, IAM/PAM, IDS/IPS, cloud security, and vulnerability-management platforms.
• Partner with Infrastructure, Cloud, Development, Legal, Procurement, and business teams to integrate security requirements into technology solutions and business processes.
• Manage security vendors, technology partners, audits, and operational security services.
• Develop and report cybersecurity metrics, KPIs, security trends, and program effectiveness to leadership.
• Lead, mentor, and develop security professionals while providing technical guidance and escalation leadership for significant security incidents.

Education & Experience:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, or equivalent relevant experience.
• 7+ years of progressive cybersecurity or information security experience, including significant experience in Security Operations, Security Engineering, or incident response.
• Demonstrated experience leading security professionals or technical cybersecurity teams.
• Hands-on experience with SIEM/SOAR platforms such as Rapid7, CrowdStrike, or comparable technologies.
• Working knowledge of EDR/XDR, IAM/PAM, vulnerability management, cloud security, WebApp firewalls, IDS/IPS, DLP, and related enterprise security technologies.
• Knowledge of cybersecurity frameworks and standards such as NIST CSF, , ISO 27001, and CIS 18 Controls.
• CISSP, CISM, GCIH, CEH, AWS Security, Microsoft Security, or comparable certification preferred.

Hiring Range: $109,700 to $138,220

This position is also eligible for participation in AAA, Inc.'s Associates Incentive Plan.

AAA, Inc. is committed to paying competitively and equitably. The posted range for this position represents competitive compensation based on market data, internal equity, and the skills and requirements of the position. The compensation offered will depend on your qualifications and experience.

AAA, Inc. is not accepting unsolicited assistance from any search firms for this employment opportunity. All resumes submitted by search firms to any employee working at AAA, Inc., either by email, the Internet, or in any form and method, without a valid written Statement of Work in place for this position from AAA, Inc. will be deemed the sole property of AAA, Inc. No fee will be paid if AAA, Inc. hires the candidate due to the referral or through other means.