Cybersecurity Operations Manager

Responsibilities

The Cybersecurity Operations Manager leads global security operations, including threat monitoring, incident response, and the management of security analysts and engineers. This role also oversees technology lifecycle management, operational metrics, and cross-functional security initiatives to reduce organizational risk.

Requirements

Candidates must have at least 8 years of experience in information security, including prior experience in staff supervision and professional development. Proficiency in security frameworks such as NIST, ISO 27001, HIPAA, and HITRUST is required, along with the ability to work in a geographically diverse global organization.

Skills

• Cybersecurity operations
• Incident response
• Threat monitoring
• Security engineering
• SIEM
• EDR
• Firewall management
• Risk analysis
• Identity and access management
• Security auditing
• Team leadership
• Compliance management
• NIST framework
• ISO 27001
• HIPAA
• HITRUST

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Employee assistance program
• 401(k) plan
• Discretionary bonus program
• Flexible spending accounts
• Paid time off
• Paid holidays
• Family building benefits
• Paid parental leave
• Life insurance
• Accidental death and dismemberment insurance
• Short-term disability
• Long-term disability

About this role

NOTE: Individual(s) must be legally authorized to work in the United States
without the need for immigration support or sponsorship from Milliman now or in
the future.

POSITION SUMMARY:

The Cybersecurity Operations Manager leads the day-to-day delivery and
continuous improvement of Milliman's global security operations capabilities.
This role manages security operations analysts and security engineers
responsible for threat monitoring, detection, investigation, containment, and
remediation; incident response management and triage; maintenance of incident
response standards; and the planning and delivery of tabletop exercises. The
team also maintains the platforms and controls that protect the organization.

Reporting to the Chief Information Security Officer (CISO), this position
combines people leadership, technical depth, operational discipline, and
cross-functional partnership. The manager owns team performance, workforce
planning, annual reviews, professional development, operational metrics,
technology lifecycle management, and the execution of security initiatives
across a geographically distributed organization. The role works closely with IT
Operations, Infrastructure, Privacy, Risk, Compliance, Legal, and business
stakeholders to strengthen resilience, reduce risk, and enable secure business
operations.

RESPONSIBILITIES:

* Manage the operation and lifecycle of SIEM, EDR, security scanning, firewall,
secure web gateway, and related security technologies.
* Manage Security Operations Analysts and Security Engineers, including
performance management, annual reviews, workload oversight, and professional
development.
* Establish operating procedures, escalation paths, on-call expectations, and
service levels, and support the delivery of artifacts for internal and
external security audits.
* Develop and maintain dashboards, key performance indicators, risk indicators,
and executive reporting that demonstrate operational performance, control
effectiveness, exposure, and trends.
* Partner with infrastructure, cloud, identity, network, endpoint, application,
and privacy teams to embed security requirements and improve preventive,
detective, and responsive controls.

* Lead security projects and cross-functional initiatives, balancing
operational priorities with strategic commitments and ensuring clear
ownership, communication, and delivery.

 SKILLS & QUALIFICATIONS REQUIRED:

* The ideal candidate must have minimum 8 years of business experience in the
areas of Information Security.
* The ideal candidate must have working knowledge of auditing, policy, database
and firewall security, risk analysis, identity and access management, and web
services.
* The ideal candidate must have prior experience supervising and professional
development of staff in the Information Security field.
* Must have prior experience working with geographically diverse offices in a
global organization.
* Must have the ability to interpret information security data and processes to
identify potential compliance issues.
* Must have Knowledge of security and control frameworks such as ISO
27001/27002, NIST Cybersecurity Framework, NIST SP 800-53, HIPAA, and
HITRUST.

LOCATION:

* This is a remote role. This job posting is expected to close on November
13th, 2026

COMPENSATION:

The overall range for this role is $150,348 - $285,274. For candidates residing
in: 

* Alaska, California, Connecticut, Illinois, Maryland, Massachusetts, New
Jersey, New York City, Pennsylvania, Virginia, Washington, or the District of
Columbia the range is $172,900 - $285,274.

*  All other locations the range is $150,348 - $248,064.

A combination of factors will be considered, including, but not limited to,
education, relevant work experience, qualifications, skills, certifications,
etc. 

BENEFITS:

We offer a comprehensive benefits package designed to support employees’ health,
financial security, and well-being. Benefits include: 

* Medical, Dental and Vision – Coverage for employees, dependents, and domestic
partners. 
* Employee Assistance Program (EAP) – Confidential support for personal and
work-related challenges. 
* 401(k) Plan – Includes a company matching program and profit-sharing
contributions. 
* Discretionary Bonus Program – Recognizing employee contributions. 
* Flexible Spending Accounts (FSA) – Pre-tax savings for dependent care,
transportation, and eligible medical expenses. 
* Paid Time Off (PTO) – Begins accruing on the first day of work. Full-time
employees accrue 15 days per year, and employees working less than full-time
accrue PTO on a prorated basis. 
* Holidays – A minimum of 10 paid holidays per year. 
* Family Building Benefits – Includes adoption and fertility assistance. 
* Paid Parental Leave – 11 weeks of paid leave for employees who meet
eligibility criteria. 
* Life Insurance & AD&D – 100% of premiums covered by Milliman. 
* Short-Term and Long-Term Disability – Fully paid by Milliman. 

ABOUT MILLIMAN:

Independent for over 77 years, Milliman delivers market-leading services and
solutions to clients worldwide. Today, we are helping companies take on some of
the world’s most critical and complex issues, including retirement funding and
healthcare financing, risk management and regulatory compliance, data analytics
and business transformation.

Through a team of professionals ranging from actuaries to clinicians, technology
specialists to plan administrators, we offer unparalleled expertise in employee
benefits, investment consulting, healthcare, life insurance and financial
services, and property and casualty insurance.

EQUAL OPPORTUNITY:

All qualified applicants will receive consideration for employment, without
regard to race, color, religion, sex, sexual orientation, national origin,
disability, or status as a protected veteran.

#LI-HM1| #LI-REMOTE

About Milliman

Software Development · 201-500 employees · headquartered in Seattle, Washington · founded 1997