Director, Information Security Operations (Hybrid IN Orange Coun (Santa Ana)

An enterprise level client is looking for a Director of Information Security Operations (SOC) to join their Information Security Organization. This person will lead all activities within the Security Operations Center (SOC), maintaining the highest standards of security operations and ensuring the teams readiness to address emerging threats. They will oversee the Global SOC, SIEM, SOAR, and Security Incident Response functions, managing a department composed of technical team members and managers from various disciplines. Continuous improvements and automation are essential to their success. - SOC Management : Oversee SOC maturity, improving incident response, reducing false positives, and enhancing threat detection. - Global Coverage : Ensure 24x7x365 global detection and response coverage with SOC / MSOC managers. - Security Operations : Monitor and evaluate security operations, automation, threat-hunting, eDiscovery, legal holds, and forensics. - Incident Oversight : Oversee security incidents, processes, and escalations; act as incident commander for severe incidents. - Compliance : Develop and manage playbooks, procedures, and standards to ensure compliance with security laws and regulations. Cyber Defense : Oversee the development and maintenance of cyber defense strategies, policies, and toolsWe are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity / affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and / or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal. com. To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy : https : / / insightglobal.com / workforce-privacy-policy / . - 10+ years of experience in technical and business development within Information Security Operations (SOC) Knowledge of IDS / IPS, SIEM, Web Proxy, Encryption, Patch Management, Vulnerability Scanning, Forensics, Penetration Testing, DLP, Email Gateways, Anti-spam, MDM, Privileged Account Management, Log Analytics, Two-Factor Authentication, Single Sign-On- Experience with IT security, compliance, risk and privacy frameworks such as ISO 27001, NIST 800-53, HIPAA, GDPR, CCPA- Extensive knowledge and experience managing a strong 24x7 SOC and Security Incident Response team- Extensive knowledge of Security Event and Incident Management (SEIM) and Security Orchestration Automation and Response (SOAR) tools