Talent.com
Head of Cyber Strategy & Security Operations
Head of Cyber Strategy & Security OperationsMassMutual • Boston, MA, United States
No se aceptan más aplicaciones
Head of Cyber Strategy & Security Operations

Head of Cyber Strategy & Security Operations

MassMutual • Boston, MA, United States
Hace 14 días
Tipo de contrato
  • A tiempo completo
Descripción del trabajo

Position Overview

Massachusetts Mutual Life Insurance Company (MassMutual) is seeking a dynamic and experienced leader to serve as Head of Cybersecurity Strategy & Operations. This role is a critical member of the cybersecurity leadership team, reporting directly to the CISO, and is responsible for leading the operational execution of the enterprise cybersecurity program. The successful candidate will oversee all aspects of cyber operations, governance, risk and compliance —including the Security Operations Center (SOC), threat intelligence, incident response, and vulnerability management—while also playing a pivotal role in shaping and executing the company’s cybersecurity strategy. This leader will act as a trusted delegate to the CISO, ensuring continuity of leadership and resilience across the cybersecurity function.

Key Responsibilities

Reporting to the CISO, the Head of Cyber SOC & Cyber Strategy + Operations is a critical enterprise leader accountable for the day-to-day resilience of the company’s cyber security operations and long-term cyber security strategy. This role will lead MassMutual’s strategy to safeguard digital assets and sustain policyholder trust by driving proactive threat management, advanced data analytics, and disciplined risk management. This role will implement cutting-edge security controls and continuously adapt them to address the evolving threat landscape to strengthen cyber resiliency while enabling the business. This role will foster a pervasive culture of security awareness across the enterprise, ensuring risk-informed decisions, measurable control effectiveness, and rapid detection and response—so security accelerates innovation and delivers resilient, trustworthy outcomes for our policyholders. This executive owns the global Security Operations Center (SOC), Threat Intelligence, Incident Response, and security operations platforms, while orchestrating the operating model, metrics, and governance for a high-performing cyber program. The role partners deeply with ERM to integrate cyber risk into the enterprise risk framework and routinely engages executive leadership and the Board on posture, risk, and program maturity.

Strategy & Operating Model

  • Create, refine, and operationalize the multi-year cybersecurity strategy and roadmap; translate strategy into an executable operating plan, budgets, and measurable outcomes.
  • Establish and continuously improve the cyber operating model (first / second line interfaces, decision rights, runbooks, service levels), ensuring alignment with enterprise risk appetite and regulatory expectations.

Security Operations (SOC) & Incident Readiness

  • Lead 24×7 global SOC operations (monitoring, detection, triage, response, recovery), integrated with Threat Intel and Incident Response; ensure modern detection engineering and threat-informed defense.
  • Own cyber incident response : playbooks, tabletop exercises, and lessons-learned; coordinate with cyber partner organizations and corporate communications, on material events.
  • Governance, Risk & Compliance

  • Integrate cyber risk programs and frameworks (e.g., NIST CSF, FAIR) with the enterprise risk framework; run or contribute to risk councils, steering committees, and regulatory / assurance routines.
  • Drive cyber policies, standards, and control health; ensure readiness for regulators, auditors, customers, and partners; partner with ERM on material risk identification and reporting.
  • Metrics, Reporting & Executive Engagement

  • Define and maintain KPIs / KRIs and board-level metrics that reflect risk reduction, operational performance, and program maturity; produce concise, decision-oriented reports for the CISO, ELT, and Board.
  • Architecture, Engineering & Third Parties

  • Partner with Security Architecture / Engineering to ensure controls are designed for cloud and on-prem environments and are instrumented for measurable effectiveness.
  • Oversee critical security platforms and vendors (SIEM, EDR, SOAR, threat intel, vulnerability / attack surface management); evaluate providers, negotiate outcomes, and ensure measurable value.
  • Collaborate with Procurement / TPRM for third-party cyber risk management and incident coordination with key suppliers.
  • Culture, Talent & Budget

  • Build and lead a high-performing, mission-driven team; set outcomes, develop leaders, design on-call / coverage models, and foster a culture of accountability, speed, and continuous improvement.
  • Own budgets for SOC and operations, tying investments to risk reduction and performance outcomes.
  • Champion security awareness and partnership across technology and the business. 12-Month Success Measures (Examples)
  • Mean Time to Detect / Respond (MTTD / MTTR) : ≥30% improvement across priority incident classes.
  • Detection Quality : False-positive rate reduced by ≥25%; ≥90% coverage of critical MITRE ATT&CK techniques relevant to our threat model.
  • Vulnerability Risk : Critical risk backlog reduced by ≥50%; SLA compliance ≥95% for tier-1 assets.
  • Program Maturity : Target state achieved for top 3 control domains (e.g., identity, endpoint, cloud) and ≥1 maturity tier uplift in SOC capability.
  • Board / Regulatory Confidence : Clear KRIs established; positive external
  • assurance outcomes (no high-severity findings).

  • Talent & Operating Model : Key leadership roles filled; healthy on-call model;
  • 85% team engagement / retention.

    Required Qualifications

  • 12–15+ years of progressive cybersecurity leadership in complex, regulated enterprises; proven accountability for SOC / IR, vulnerability management, and cyber operations.
  • Demonstrated success shaping and executing cyber strategy and integrating cyber risk with enterprise risk frameworks; direct Board / ELT engagement experience.
  • Depth in threat-informed defense, detection engineering, incident command, and large-scale operations.
  • Bachelor’s degree in Information Security, Computer Science, or related field; advanced degree preferred. Relevant credentials (e.g., CISSP, CISM, CRISC) strongly preferred.
  • Required Certifications

    CISSP (Certified Information Systems Security Professional) Strongly Preferred, CISM (Certified Information Security Manager), CRISC (Certified in Risk and Information Systems Control), GIAC certifications (e.g., GCIA, GCIH, GRID) for SOC / IR expertise, CISA (Certified Information Systems Auditor) for governance and compliance.

    #LI-MC1

    Why Join Us.

    We’ve been around since 1851. During our history, we’ve learned a few things about making sure our customers are our top priority. In order to meet and exceed their expectations, we must have the best people providing the best thinking, products and services. To accomplish this, we celebrate an inclusive, vibrant and diverse culture that encourages growth, openness and opportunities for everyone. A career with MassMutual means you will be part of a strong, stable and ethical business with industry leading pay and benefits. And your voice will always be heard.

    We help people secure their future and protect the ones they love. As a company owned by our policyowners, we are defined by mutuality and our vision to put customers first. It’s more than our company structure – it’s our way of life. We are a company of people protecting people. Our company exists because people are willing to share risk and resources, and rely on each other when it counts. At MassMutual, we Live Mutual.

    MassMutual is an Equal Employment Opportunity employer. We welcome all persons to apply.

    If you need an accommodation to complete the application process, please contact us and share the specifics of the assistance you need.

    At MassMutual, we focus on ensuring fair, equitable pay by providing competitive salaries, along with incentive and bonus opportunities for all employees. Your total compensation package includes either a bonus target or in a sales-focused role a Variable Incentive Compensation component.For more information about our extensive benefits offerings please check out our Total Rewards at a Glance.

    #J-18808-Ljbffr

    Crear una alerta de empleo para esta búsqueda

    Head Of Security • Boston, MA, United States

    Ofertas relacionadas
    Cyber Security Project Manager

    Cyber Security Project Manager

    VirtualVocations • Lowell, Massachusetts, United States
    A tiempo completo
    A company is looking for a Project Manager with Cyber Security experience.Key Responsibilities Manage multiple Cyber Security projects involving implementation of new security tools and infrastru...Mostrar más
    Última actualización: hace más de 30 días • Oferta promocionada
    Security Operations Center Manager

    Security Operations Center Manager

    VirtualVocations • Lowell, Massachusetts, United States
    A tiempo completo
    A company is looking for a Manager, Security Operations Center (SOC).Key Responsibilities Lead day-to-day SOC operations including monitoring, detection, analysis, and incident response Develop ...Mostrar más
    Última actualización: hace más de 30 días • Oferta promocionada
    Cybersecurity Vulnerability Management Lead

    Cybersecurity Vulnerability Management Lead

    VirtualVocations • Dorchester, Massachusetts, United States
    A tiempo completo
    A company is looking for a Vulnerability Management Team Lead to oversee cybersecurity vulnerability management efforts.Key Responsibilities : Develop and lead the enterprise-wide product security...Mostrar más
    Última actualización: hace 4 días • Oferta promocionada
    Cyber Resiliency Director

    Cyber Resiliency Director

    VirtualVocations • Dorchester, Massachusetts, United States
    A tiempo completo
    A company is looking for a Director of Cyber Resiliency.Key Responsibilities Lead and mentor the Cyber Resiliency team in areas such as cloud security engineering and incident readiness Design a...Mostrar más
    Última actualización: hace 2 días • Oferta promocionada
    Manager, Cybersecurity & Operations

    Manager, Cybersecurity & Operations

    OpenGov • Boston, MA, United States
    A tiempo completo
    OpenGov is the leader in AI and ERP solutions for local and state governments in the U.More than 2,000 cities, counties, state agencies, school districts, and special districts rely on the OpenGov ...Mostrar más
    Última actualización: hace 22 días • Oferta promocionada
    Head of Workplace Technology Solutions

    Head of Workplace Technology Solutions

    VirtualVocations • Lowell, Massachusetts, United States
    A tiempo completo
    A company is looking for a Head of SaaS & Workplace Technology Solutions.Key Responsibilities Lead and execute complex initiatives, managing project scope, objectives, timelines, and budgets Dri...Mostrar más
    Última actualización: hace 4 días • Oferta promocionada
    Senior Cyber Security Engineer

    Senior Cyber Security Engineer

    VirtualVocations • Lowell, Massachusetts, United States
    A tiempo completo
    A company is looking for a Senior Cyber Security Engineer, Security Validation (Remote).Key Responsibilities Lead Red Team engagements to emulate real-world threat actors and validate enterprise ...Mostrar más
    Última actualización: hace más de 30 días • Oferta promocionada
    Vice President of Security Operations

    Vice President of Security Operations

    VirtualVocations • Lowell, Massachusetts, United States
    A tiempo completo
    A company is looking for a Vice President of Security Operations to enhance its global operational security capabilities. Key Responsibilities Mature and expand global Security Operations function...Mostrar más
    Última actualización: hace 5 días • Oferta promocionada
    Head of Operational Risk Assessments and Governance

    Head of Operational Risk Assessments and Governance

    MassMutual • Boston, MA, US
    A tiempo completo
    Head of Operational Risk Assessments and Governance.MassMutual is seeking a strategic and experienced risk leader to serve as Head of Operational Risk Assessments and Governance.This second li...Mostrar más
    Última actualización: hace 17 días • Oferta promocionada
    Director of Digital Operations

    Director of Digital Operations

    VirtualVocations • Lowell, Massachusetts, United States
    A tiempo completo
    A company is looking for a Director of Digital Enablement Operations & Back Office.Key Responsibilities Develop and execute a unified digital strategy aligned with business objectives Drive ...Mostrar más
    Última actualización: hace 3 días • Oferta promocionada
    Cybersecurity C-SCRM Lead

    Cybersecurity C-SCRM Lead

    VirtualVocations • Dorchester, Massachusetts, United States
    A tiempo completo
    A company is looking for a Cybersecurity IV&V and Supply Chain Security (C-SCRM) Lead.Key Responsibilities Serve as the lead technical advisor for Third-Party Cyber Risk Management (TPCRM) and In...Mostrar más
    Última actualización: hace 4 días • Oferta promocionada
    Director, Cloud Security Specialist

    Director, Cloud Security Specialist

    Fidelity Investments • Boston, MA, US
    A tiempo completo
    The Cloud Security Center of Excellence within Fidelity Enterprise Cyber Security (ECS) is seeking a cloud or data platforms focused security engineer who has broad security domain knowledge includ...Mostrar más
    Última actualización: hace 21 horas • Oferta promocionada • Nueva oferta
    Senior Director of Security Operations

    Senior Director of Security Operations

    VirtualVocations • Dorchester, Massachusetts, United States
    A tiempo completo
    A company is looking for a Senior Director of Security Operations & Engineering.Key Responsibilities Lead and develop teams responsible for cloud security engineering, network and infrastructure ...Mostrar más
    Última actualización: hace más de 30 días • Oferta promocionada
    Cybersecurity IAM Manager

    Cybersecurity IAM Manager

    VirtualVocations • Lowell, Massachusetts, United States
    A tiempo completo
    A company is looking for an Identity & Access Management (IAM) Manager - Cybersecurity.Key Responsibilities Lead and mentor a global IAM team, fostering a collaborative and inclusive culture Dev...Mostrar más
    Última actualización: hace 3 días • Oferta promocionada
    Senior Security Operations Engineer

    Senior Security Operations Engineer

    VirtualVocations • Dorchester, Massachusetts, United States
    A tiempo completo
    A company is looking for a Senior SecOps Engineer to enhance operational security and automate security processes.Key Responsibilities Design and maintain automation workflows to streamline SecOp...Mostrar más
    Última actualización: hace más de 30 días • Oferta promocionada
    Security Operations Associate Director

    Security Operations Associate Director

    VirtualVocations • Dorchester, Massachusetts, United States
    A tiempo completo
    A company is looking for an Associate Director of Security Architecture Operations.Key Responsibilities Coordinate workflows and facilitate conversations between the Security Architecture & Engin...Mostrar más
    Última actualización: hace 2 días • Oferta promocionada
    Cybersecurity Manager

    Cybersecurity Manager

    VirtualVocations • Lowell, Massachusetts, United States
    A tiempo completo
    A company is looking for a Manager, Cybersecurity.Key Responsibilities Develop and implement a comprehensive information security strategy and policies Lead and manage a team of information secu...Mostrar más
    Última actualización: hace más de 30 días • Oferta promocionada
    Threat Intelligence Lead

    Threat Intelligence Lead

    VirtualVocations • Lowell, Massachusetts, United States
    A tiempo completo
    A company is looking for a Threat Intelligence Lead to design and mature its Cyber Threat Intelligence program.Key Responsibilities Build and enhance automation pipelines for intelligence collect...Mostrar más
    Última actualización: hace 1 día • Oferta promocionada