Manager, Information Security Operations

The Security Operations Manager will be responsible for leading Scout Motors Security Operations Center (SOC) as well as its unified vulnerability management program . 

Become part of an iconic brand that is set to revolutionize the all-electric pick-up truck & rugged SUV marketplace by achieving the following: 

The essence of this role is to: 

• Lead Scout Motors' Information Security Operations program, ensuring the continuous protection of company systems, networks, applications, and data against evolving cyber threats. 
• Manage day-to-day security operations, including security monitoring, threat detection, incident response, vulnerability management, and security tool administration. 
• Develop, implement, and continuously improve security operations processes, procedures, and playbooks aligned with industry best practices and organizational objectives. 
• Lead the identification, investigation, containment, eradication, and recovery activities associated with cybersecurity incidents. 
• Coordinate cross-functional response efforts with technology, legal, compliance, privacy, human resources, and business stakeholders during security events. 
• Oversee security monitoring capabilities, including Security Information and Event Management (SIEM), endpoint detection and response (EDR), cloud security monitoring, and threat intelligence platforms. 
• Partner with infrastructure, cloud, application development, and engineering teams to strengthen security controls and reduce organizational risk. 
• Define and monitor key security operations metrics, service levels, and performance indicators to measure program effectiveness and drive continuous improvement. 
• Lead threat hunting activities to proactively identify indicators of compromise, emerging threats, and potential weaknesses within the environment. 
• Collaborate with third-party service providers, managed security service providers (MSSPs), and technology partners to ensure effective delivery of security operations services. 
• Support the development, testing, and maintenance of business continuity and cyber incident response capabilities. 
• Conduct post-incident reviews and root cause analyses, ensuring lessons learned are documented and improvements are implemented. 
• Assist with the evaluation and implementation of new security technologies to enhance organizational detection, response, and resilience capabilities. 
• Partner with Information Security Governance, Risk, and Compliance teams to ensure operational controls align with security policies, standards, and regulatory requirements. 
• Stay current on cyber threat trends, attack techniques, emerging technologies, and evolving security practices. 
• Prepare and deliver operational security reports, risk summaries, and incident briefings to information technology leadership and executive management. 
• Manage, coach, and develop a team of security analysts and engineers, including setting priorities, assigning work, supporting performance expectations, and fostering accountability and continuous improvement. 
• Foster a culture of accountability, collaboration, continuous improvement, and operational excellence across the Security Operations function. 
• Translate security operations objectives into team priorities, work plans, schedules, and resource allocations to support timely delivery of SOC, incident response, and vulnerability management activities. 

Location & Travel Expectations:

• This role may be based out of the Scout Motors corporate headquarters in Charlotte, NC. 
• This role requires 4-5 days per week in the office, with regular in-person meetings and events. 
• Applicants should expect that the role will require the ability to convene with Scout colleagues in person and travel to participate in events on behalf of the company from time to time.

We expect all Scout employees to have integrity, curiosity, resourcefulness, and strive to exhibit a positive attitude, as well as a growth mindset. You’ll be comfortable with change and flexible in a fast-paced, high-growth environment. You’ll take a collaborative approach to achieve ambitious goals. Here's what else you'll bring:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. Advanced degree preferred. 
• 7+ years of experience in Information Security, Cybersecurity Operations, Security Engineering, or a related discipline. 
• Professional certifications such as CISSP, CISM, GCIH, GCIA, GCFA, Security+, or similar are highly desirable. 
• Strong experience operating and managing security technologies, including SIEM, EDR/XDR, vulnerability management, threat intelligence, email security, cloud security, and identity protection platforms. 
• Demonstrated experience leading cybersecurity incident response activities in complex enterprise environments. 
• Strong understanding of security frameworks and best practices such as NIST Cybersecurity Framework, NIST 800-61, MITRE ATT&CK, ISO 27001, and CIS Controls. 
• Experience with cloud security technologies and security operations in Microsoft Azure, AWS, or Google Cloud environments. 
• Knowledge of network security, endpoint security, identity and access management, logging, monitoring, and security architecture principles. 
• Experience developing operational metrics, dashboards, and executive-level reporting. 
• Strong analytical, problem-solving, and decision-making skills with the ability to prioritize activities in a dynamic environment. 
• Experience managing third-party security providers, consultants, or managed security services. 
• Knowledge of automotive, manufacturing, or industrial environments is preferred but not required. 
• Up-to-date knowledge of emerging cyber threats, attack techniques, regulatory requirements, and security technologies. 

Preferred Certifications 

• CISSP (Certified Information Systems Security Professional) 
• CISM (Certified Information Security Manager) 
• GCIH (GIAC Certified Incident Handler) 
• GCIA (GIAC Certified Intrusion Analyst) 
• GCFA (GIAC Certified Forensic Analyst) 
• CEH (Certified Ethical Hacker) 
• Microsoft Security Certifications 
• AWS or Azure Security Certifications 

The benefits of joining Scout include the chance to build products and a company from the ground up.  This is a chance to create something new and lasting – with an iconic brand at its foundation.  In addition, Scout provides competitive compensation and benefits to support your physical, mental, and financial wellbeing. Program specifics are detailed in company policies and employee benefit guides, select highlights:

• Competitive insurance including:
  • Medical, dental, vision and income protection plans
• 401(k) program with:
  • An employer match and immediate vesting
• Generous Paid Time Off including:
  • 20 days planned PTO, as accrued
  • 40 hours of unplanned PTO and 14 company or floating holidays, annually
  • Up to 16 weeks of paid parental leave for biological and adoptive parents of all genders
  • Paid leave for circumstances related to bereavement, jury duty, voting time, or military leave
• Corporate Vehicle Program with:
  • Eligibility for 1 assigned vehicle
  • A mobility stipend

This is a full-time, exempt position eligible to receive a base salary and to participate in an annual performance bonus program. Final salary offered will be determined based on factors including but not limited to the candidate's skills and experience. The annual performance bonus program is preset and not candidate dependent.

Initial base salary range = $140,000.00 - $170,000.00

Internal leveling code: M8