Information Security Operations Lead

Ready to own and evolve a cybersecurity program ? This role offers executive visibility, strategic influence, and the opportunity to strengthen enterprise security from the ground up.FTOnsite in CT130-155KRisk management, RMF, risk assessments, vulnerability assessments and scans, and penetration tests, leadership and hands-on. Small team We are seeking an Information Security Operations Specialist to lead and strengthen its cybersecurity program. This leadership role is responsible for overseeing security operations, risk management, incident response, regulatory compliance, and vendor security to ensure a resilient and secure enterprise environment. This is an individual contributor role that will be a combination of leadership and being hands-on.Key ResponsibilitiesLead execution of enterprise-wide cybersecurity initiatives and security operationsOversee audits, assessments, and testing of the cybersecurity environmentManage security project planning, budgeting, documentation, and vendor coordinationEstablish and enforce security policies, procedures, and technical controls across networks, systems, and applicationsConduct risk assessments, vulnerability scans, penetration testing, and fraud investigationsLead incident response efforts, including threat detection, investigation, containment, and recoveryDevelop and maintain incident response plans and forensic processesEnsure compliance with regulatory and government cybersecurity standardsOversee third-party/vendor security assessments and risk management processesDevelop and manage security awareness programs for employees and stakeholdersProvide reporting and updates to executive leadership and the board on cybersecurity posture and complianceQualificationsStrong experience in information security operations within a regulated environment (financial services preferred)Expertise in risk management frameworks (RMF), vulnerability management, and incident responseExperience managing audits, regulatory compliance, and third-party security reviewsKnowledge of current cybersecurity threats, tools, technologies, and best practicesProven leadership skills with the ability to collaborate cross-functionally and influence stakeholdersStrong analytical, documentation, and executive-level communication skills