[Remote] Senior Director, Security Operations Center

Note: The job is a remote job and is open to candidates in USA. CFA Institute is seeking a hands-on, outcomes-driven Senior Director to lead our global Security Operations Center (SOC). In this role, you will set the strategic vision for detection and response, build and mentor a high-performing global team, and ensure resilient, real-time defense of our systems, data, and infrastructure.

Responsibilities

• Set the SOC strategy: Define and execute a multi-year roadmap aligned to business goals; measure and report outcomes
• Lead a global team: Manage, mentor, and grow security analysts, engineers, and incident responders to deliver 24x7 capabilities
• Own detection & response: Oversee continuous monitoring of networks, systems, and applications; triage, contain, eradicate, and recover from threats in real time
• Mature incident readiness: Develop, maintain, and drill IR plans, playbooks, and runbooks; coordinate cross-functional war rooms
• Elevate resilience: Drive threat hunting, digital forensics, and post-incident reviews to strengthen controls and reduce MTTD/MTTR
• Assure compliance & risk management: Align practices to global regulations and frameworks; partner with stakeholders to assess risk and implement mitigations
• Continuously improve: Lead vulnerability assessments and pen tests; track remediation to closure
• Innovate the stack: Evaluate and adopt modern tooling, automation, and intelligence sources (e.g., MITRE ATT&CK–mapped detections) to stay ahead of adversaries
• Executive communication: Translate technical risk into business terms and present clear updates to senior leadership and the board as needed

Skills

• Bachelor's degree in cybersecurity, computer science, information technology, or related field
• 10–15+ years in cybersecurity operations with 5+ years leading SOC/IR teams
• Proven expertise in SOC management, incident response, digital forensics, and enterprise monitoring
• Demonstrated command of security frameworks and methodologies (e.g., NIST, MITRE ATT&CK)
• Excellent judgment under pressure with strong analytical, problem-solving, and decision-making skills
• Inclusive people leader: coaches, mentors, and builds high-performing, diverse teams across time zones
• Exceptional communication skills for both technical and non-technical audiences
• Willingness to operate as a hands-on leader
• Professional certifications such as CISSP, CISM, CEH, or equivalent
• Experience orchestrating complex, cross-functional incident responses and executive-level briefings
• Background establishing SOC metrics, SLAs/SLOs, and reporting aligned to business risk
• Track record implementing automation, threat intelligence fusion, and continuous improvement programs

Benefits

• 12% employer retirement contribution
• Comprehensive health coverage for you and your family
• Generous leave and time off
• Competitive retirement plans
• Flexible work options
• Wellness, education, and support programs

Company Overview