Cybersecurity Operations Manager

About this role

NOTE: Individual(s) must be legally authorized to work in the United States without the need for immigration support or sponsorship from Milliman now or in the future.

POSITION SUMMARY:

The Cybersecurity Operations Manager leads the day-to-day delivery and continuous improvement of Milliman's global security operations capabilities. This role manages security operations analysts and security engineers responsible for threat monitoring, detection, investigation, containment, and remediation; incident response management and triage; maintenance of incident response standards; and the planning and delivery of tabletop exercises. The team also maintains the platforms and controls that protect the organization.

Reporting to the Chief Information Security Officer (CISO), this position combines people leadership, technical depth, operational discipline, and cross-functional partnership. The manager owns team performance, workforce planning, annual reviews, professional development, operational metrics, technology lifecycle management, and the execution of security initiatives across a geographically distributed organization. The role works closely with IT Operations, Infrastructure, Privacy, Risk, Compliance, Legal, and business stakeholders to strengthen resilience, reduce risk, and enable secure business operations.

RESPONSIBILITIES:

• Manage the operation and lifecycle of SIEM, EDR, security scanning, firewall, secure web gateway, and related security technologies.
• Manage Security Operations Analysts and Security Engineers, including performance management, annual reviews, workload oversight, and professional development.
• Establish operating procedures, escalation paths, on-call expectations, and service levels, and support the delivery of artifacts for internal and external security audits.
• Develop and maintain dashboards, key performance indicators, risk indicators, and executive reporting that demonstrate operational performance, control effect...