Talent.com
Head of Cyber Strategy & Security Operations
Head of Cyber Strategy & Security OperationsMassMutual • Boston, MA, United States
Head of Cyber Strategy & Security Operations

Head of Cyber Strategy & Security Operations

MassMutual • Boston, MA, United States
job_description.job_card.1_day_ago
serp_jobs.job_preview.job_type
  • serp_jobs.job_card.full_time
job_description.job_card.job_description

Position Overview

Massachusetts Mutual Life Insurance Company (MassMutual) is seeking a dynamic and experienced leader to serve as Head of Cybersecurity Strategy & Operations. This role is a critical member of the cybersecurity leadership team, reporting directly to the CISO, and is responsible for leading the operational execution of the enterprise cybersecurity program. The successful candidate will oversee all aspects of cyber operations, governance, risk and compliance —including the Security Operations Center (SOC), threat intelligence, incident response, and vulnerability management—while also playing a pivotal role in shaping and executing the company’s cybersecurity strategy. This leader will act as a trusted delegate to the CISO, ensuring continuity of leadership and resilience across the cybersecurity function.

Key Responsibilities

Reporting to the CISO, the Head of Cyber SOC & Cyber Strategy + Operations is a critical enterprise leader accountable for the day-to-day resilience of the company’s cyber security operations and long-term cyber security strategy. This role will lead MassMutual’s strategy to safeguard digital assets and sustain policyholder trust by driving proactive threat management, advanced data analytics, and disciplined risk management. This role will implement cutting-edge security controls and continuously adapt them to address the evolving threat landscape to strengthen cyber resiliency while enabling the business. This role will foster a pervasive culture of security awareness across the enterprise, ensuring risk-informed decisions, measurable control effectiveness, and rapid detection and response—so security accelerates innovation and delivers resilient, trustworthy outcomes for our policyholders. This executive owns the global Security Operations Center (SOC), Threat Intelligence, Incident Response, and security operations platforms, while orchestrating the operating model, metrics, and governance for a high-performing cyber program. The role partners deeply with ERM to integrate cyber risk into the enterprise risk framework and routinely engages executive leadership and the Board on posture, risk, and program maturity.

Strategy & Operating Model

  • Create, refine, and operationalize the multi-year cybersecurity strategy and roadmap; translate strategy into an executable operating plan, budgets, and measurable outcomes.
  • Establish and continuously improve the cyber operating model (first / second line interfaces, decision rights, runbooks, service levels), ensuring alignment with enterprise risk appetite and regulatory expectations.

Security Operations (SOC) & Incident Readiness

  • Lead 24×7 global SOC operations (monitoring, detection, triage, response, recovery), integrated with Threat Intel and Incident Response; ensure modern detection engineering and threat-informed defense.
  • Own cyber incident response : playbooks, tabletop exercises, and lessons-learned; coordinate with cyber partner organizations and corporate communications, on material events.
  • Governance, Risk & Compliance

  • Integrate cyber risk programs and frameworks (e.g., NIST CSF, FAIR) with the enterprise risk framework; run or contribute to risk councils, steering committees, and regulatory / assurance routines.
  • Drive cyber policies, standards, and control health; ensure readiness for regulators, auditors, customers, and partners; partner with ERM on material risk identification and reporting.
  • Metrics, Reporting & Executive Engagement

  • Define and maintain KPIs / KRIs and board-level metrics that reflect risk reduction, operational performance, and program maturity; produce concise, decision-oriented reports for the CISO, ELT, and Board.
  • Architecture, Engineering & Third Parties

  • Partner with Security Architecture / Engineering to ensure controls are designed for cloud and on-prem environments and are instrumented for measurable effectiveness.
  • Oversee critical security platforms and vendors (SIEM, EDR, SOAR, threat intel, vulnerability / attack surface management); evaluate providers, negotiate outcomes, and ensure measurable value.
  • Collaborate with Procurement / TPRM for third-party cyber risk management and incident coordination with key suppliers.
  • Culture, Talent & Budget

  • Build and lead a high-performing, mission-driven team; set outcomes, develop leaders, design on-call / coverage models, and foster a culture of accountability, speed, and continuous improvement.
  • Own budgets for SOC and operations, tying investments to risk reduction and performance outcomes.
  • Champion security awareness and partnership across technology and the business. 12-Month Success Measures (Examples)
  • Mean Time to Detect / Respond (MTTD / MTTR) : ≥30% improvement across priority incident classes.
  • Detection Quality : False-positive rate reduced by ≥25%; ≥90% coverage of critical MITRE ATT&CK techniques relevant to our threat model.
  • Vulnerability Risk : Critical risk backlog reduced by ≥50%; SLA compliance ≥95% for tier-1 assets.
  • Program Maturity : Target state achieved for top 3 control domains (e.g., identity, endpoint, cloud) and ≥1 maturity tier uplift in SOC capability.
  • Board / Regulatory Confidence : Clear KRIs established; positive external
  • assurance outcomes (no high-severity findings).

  • Talent & Operating Model : Key leadership roles filled; healthy on-call model;
  • 85% team engagement / retention.

    Required Qualifications

  • 12–15+ years of progressive cybersecurity leadership in complex, regulated enterprises; proven accountability for SOC / IR, vulnerability management, and cyber operations.
  • Demonstrated success shaping and executing cyber strategy and integrating cyber risk with enterprise risk frameworks; direct Board / ELT engagement experience.
  • Depth in threat-informed defense, detection engineering, incident command, and large-scale operations.
  • Bachelor’s degree in Information Security, Computer Science, or related field; advanced degree preferred. Relevant credentials (e.g., CISSP, CISM, CRISC) strongly preferred.
  • Required Certifications

    CISSP (Certified Information Systems Security Professional) Strongly Preferred, CISM (Certified Information Security Manager), CRISC (Certified in Risk and Information Systems Control), GIAC certifications (e.g., GCIA, GCIH, GRID) for SOC / IR expertise, CISA (Certified Information Systems Auditor) for governance and compliance.

    #LI-MC1

    Why Join Us.

    We’ve been around since 1851. During our history, we’ve learned a few things about making sure our customers are our top priority. In order to meet and exceed their expectations, we must have the best people providing the best thinking, products and services. To accomplish this, we celebrate an inclusive, vibrant and diverse culture that encourages growth, openness and opportunities for everyone. A career with MassMutual means you will be part of a strong, stable and ethical business with industry leading pay and benefits. And your voice will always be heard.

    We help people secure their future and protect the ones they love. As a company owned by our policyowners, we are defined by mutuality and our vision to put customers first. It’s more than our company structure – it’s our way of life. We are a company of people protecting people. Our company exists because people are willing to share risk and resources, and rely on each other when it counts. At MassMutual, we Live Mutual.

    MassMutual is an Equal Employment Opportunity employer. We welcome all persons to apply.

    If you need an accommodation to complete the application process, please contact us and share the specifics of the assistance you need.

    At MassMutual, we focus on ensuring fair, equitable pay by providing competitive salaries, along with incentive and bonus opportunities for all employees. Your total compensation package includes either a bonus target or in a sales-focused role a Variable Incentive Compensation component.For more information about our extensive benefits offerings please check out our Total Rewards at a Glance.

    #J-18808-Ljbffr

    serp_jobs.job_alerts.create_a_job

    Head Of Security • Boston, MA, United States

    Job_description.internal_linking.related_jobs
    Head of Security

    Head of Security

    VirtualVocations • Dorchester, Massachusetts, United States
    serp_jobs.job_card.full_time
    A company is looking for a Head of Security to lead and own the comprehensive security strategy.Key Responsibilities Develop and execute a holistic security strategy encompassing cybersecurity, b...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Director, Infrastructure & Security Operations

    Director, Infrastructure & Security Operations

    Brooks Automation • Chelmsford, MA, US
    serp_jobs.job_card.full_time
    Director, Infrastructure & Security Operations.Brooks is seeking a dynamic and hands-on Director of Infrastructure & Security Operations to lead and mature our global IT infrastructure and SecOps c...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Head of Technology Operations and Resilience, MD - State Street Investment Management

    Head of Technology Operations and Resilience, MD - State Street Investment Management

    STATE STREET CORPORATION • Boston, MA, United States
    serp_jobs.job_card.full_time
    State Street Investment Management (“State Street IM”, formerly known as State Street Global Advisors or SSGA) is seeking a Head of Technology Operations and Resilience, a strategic leadership role...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    Head of Compliance

    Head of Compliance

    Rebet, Inc. • Boston, MA, United States
    serp_jobs.job_card.full_time
    Be among the first 25 applicants.Get AI-powered advice on this job and more exclusive features.Rebet is a cutting-edge social “sportsbook” that revolutionizes play-for-fun sports predictions by int...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Cybersecurity Director

    Cybersecurity Director

    VirtualVocations • Lowell, Massachusetts, United States
    serp_jobs.job_card.full_time
    A company is looking for a Director of IT Cybersecurity.Key Responsibilities Develop and lead a comprehensive cybersecurity strategy aligned with business objectives Oversee risk management proc...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Manager, Cybersecurity & Operations

    Manager, Cybersecurity & Operations

    OpenGov • Boston, MA, United States
    serp_jobs.job_card.full_time
    OpenGov is the leader in AI and ERP solutions for local and state governments in the U.More than 2,000 cities, counties, state agencies, school districts, and special districts rely on the OpenGov ...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    Cybersecurity SecOps Head

    Cybersecurity SecOps Head

    VirtualVocations • Lowell, Massachusetts, United States
    serp_jobs.job_card.full_time
    A company is looking for a SecOps Head.Key Responsibilities Oversee security operations and incident response strategies Ensure compliance with security standards and regulations across cloud en...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    Vice President of Cybersecurity

    Vice President of Cybersecurity

    VirtualVocations • Dorchester, Massachusetts, United States
    serp_jobs.job_card.full_time
    A company is looking for a Vice President of Cybersecurity to lead the development and execution of an enterprise-wide cybersecurity strategy. Key Responsibilities Develop and implement a comprehe...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Global Head of Third-Party Cyber Risk Management

    Global Head of Third-Party Cyber Risk Management

    State Street • Quincy, Massachusetts, United States
    serp_jobs.job_card.full_time
    This job is with State Street, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly.Who we are ...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    Vice President, Digital Assets Operations Lead

    Vice President, Digital Assets Operations Lead

    Fidelity Investments Inc. • Boston, MA, United States
    serp_jobs.job_card.full_time
    Vice President, Digital Assets Operations Lead.Fidelity is responsible for building out the infrastructure for Fidelity’s Digital investment products operational ecosystem.The focus on cryptocurren...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Director, Threat Management

    Director, Threat Management

    Moderna • Cambridge, MA, US
    serp_jobs.job_card.permanent
    Insider Risk And Threat Management Director.This role leads Moderna's Insider Risk and Threat Management program, with responsibility for designing, implementing, and sustaining strategies that pre...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Head of Security Operations

    Head of Security Operations

    Canonical • Boston, MA, United States
    serp_jobs.job_card.full_time
    This global leadership role in cyber security is to manage the Security Operations (SecOps) team responsible for design, implementation and evolution of Canonical security practices, techniques, to...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_30 • serp_jobs.job_card.promoted
    Head of Field & Channel Marketing AIM Security

    Head of Field & Channel Marketing AIM Security

    Cato Networks • Boston, MA, US
    serp_jobs.job_card.full_time
    Welcome to the future of cloud networking and security!.Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered b...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    Cybersecurity Trust Manager

    Cybersecurity Trust Manager

    VirtualVocations • Lowell, Massachusetts, United States
    serp_jobs.job_card.full_time
    A company is looking for a Cybersecurity TPRM & Trust Manager.Key Responsibilities Manage the customer Trust Center and coordinate security audits Respond to customer security inquiries and asse...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    Cyber Infrastructure Security Compliance Lead

    Cyber Infrastructure Security Compliance Lead

    Banco Santander SA • Boston, MA, United States
    serp_jobs.job_card.full_time
    Cyber Infrastructure Security Compliance LeadCountry : United States of America • •Your Journey Starts Here : • •Santander is a global leader and innovator in the financial services industry.We believe t...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    Senior Director, Cyber Security (Hybrid - San Diego, CA or Acton, MA)

    Senior Director, Cyber Security (Hybrid - San Diego, CA or Acton, MA)

    Insulet Corporation • , MA, United States
    serp_jobs.job_card.full_time
    Senior Director, Cyber Security (Hybrid - San Diego, CA or Acton, MA) page is loaded## Senior Director, Cyber Security (Hybrid - San Diego, CA or Acton, MA)locations : San Diego, California : Act...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    Head of Technology Operations and Resilience, MD - State Street Investment Management

    Head of Technology Operations and Resilience, MD - State Street Investment Management

    State Street • Boston, MA, US
    serp_jobs.job_card.full_time
    Head Of Technology Operations And Resilience.State Street Investment Management ("State Street IM", formerly known as State Street Global Advisors or SSGA) is seeking a Head of Technology Operation...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted
    Senior Manager, Global Security Operations Center

    Senior Manager, Global Security Operations Center

    DraftKings • Nashua, NH, US
    serp_jobs.job_card.full_time
    We're hiring a Senior Manager, Global Security Operations Center to lead our end-to-end surveillance and GSOC strategy.In this high-impact role, you'll manage a global team, drive compliance, lead ...serp_jobs.internal_linking.show_more
    serp_jobs.last_updated.last_updated_variable_days • serp_jobs.job_card.promoted