Director, Security Operations Boston, MA

Audax Group is a leading alternative investment manager with offices in Boston, New York, San Francisco, and London. Since its founding in 1999, the firm has raised over $40 billion in capital across its Private Equity and Private Debt businesses. With more than 400 employees and approximately 180 investment professionals, the firm is a leading capital partner for North American middle market companies. For more information, visit the Audax Group website www.audaxgroup.com

POSITION SUMMARY :

The Director of Security Operations is a hands-on technical and leadership role responsible for managing and enhancing the firm's security operations, including SIEM, incident response, threat detection, data leakage prevention, and vulnerability management. This role balances technical execution with strategic leadership, overseeing a team of four infrastructure engineers and cybersecurity analysts while managing MSSPs to optimize security monitoring, automation, and incident response. The Director will drive continuous improvements to security controls, ensuring a proactive defense against emerging threats.

KEY RESPONSIBILITIES

Operations :

• Provide strategic leadership and tactical execution of security operations, ensuring the effectiveness of monitoring, incident response, threat detection, and vulnerability management.
• Lead and mentor a multidisciplinary security team, fostering collaboration, professional growth, and continuous learning to strengthen security capabilities.
• Manage and enhance security detection capabilities, including SIEM, IAM, EDR, and firewalls, ensuring continuous improvement, fine-tuning detection rules, and reducing false positives.
• Define and track key performance indicators (KPIs) for incident response, vulnerability management, threat intelligence to measure and drive security improvements.
• Oversee the firm's Managed Security Services Provider (MSSP), continuously evaluating performance to optimize threat detection, incident response, and overall security posture.
• Lead continuous vulnerability monitoring and risk assessments across on-premises, SaaS, and cloud environments, prioritizing remediation efforts to mitigate security risks.
• Develop and oversee security awareness programs, integrating training into onboarding and ongoing development, while tracking effectiveness through phishing simulations and key performance metrics.
• Conduct comprehensive third-party risk assessments, evaluating security, compliance, and data protection risks for new applications, service providers, and consultants.
• Develop and manage a structured patch and configuration management program, enforcing secure configurations and ensuring critical vulnerabilities are prioritized and remediated within established SLAs.
• Develop and maintain incident response runbooks and conduct regular simulations to ensure team readiness, identify process gaps, and enhance response effectiveness.

Access & Data Protection :

Professional Experience & Qualifications

Audax offers a wide range of employee benefits, including health insurance, life insurance, disability insurance, paid time off (including sick leave, parental leave, volunteer leave, and vacation), charitable donation match, family support services (including Bright Horizons and Benefit Advocate Center), and a 401(k) in addition to other benefits.

This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities and activities may change or new ones may be assigned at any time with or without notice.

Audax Management Co. is an equal opportunity employer.

J-18808-Ljbffr