Job Title
Senior Manager, Security Operations
Requisition
JR000015744 Senior Manager, Security Operations (Open)
Location
Bridgewater, NJ
Additional Locations
Job Description Summary
As a member of Keenova's IT Security department and under the supervision of the CISO, the Senior Manager, Security Operations is responsible for the strategy, roadmap, and day-to-day execution of Keenova's security operations capabilities. This role ensures consistent service delivery, measurable outcomes, and continuous improvement across incident response, security monitoring and detection, threat management, endpoint/host security, data loss prevention, and vulnerability and exposure management. The Senior Manager leads the design, implementation, and operational support of security solutions (applications and services), controls, policies, and procedures that protect Company data and assets, and advises management on notable threats, risks, and incidents.
Job Description
Responsible for the global IT security operations of the Company which includes management and oversight of a significant third-party provider. Ensures 24/7/365 coverage for incident response, detection and recovery and is accountable for ensuring and following escalation paths and providing incident communications to appropriate Senior Leaders within the Company. Serves as a strategic advisor to influence outcomes and build top-performing programs collaborating with internal stakeholders and working with advanced technologies.
Key Accountabilities
Oversee day-to-day security operations execution, including incident detection, investigation, response, and recovery, with clear escalation paths and incident communications.
Define and maintain the security operations operating model (coverage, on-call rotations, severity taxonomy, runbooks/playbooks, and stakeholder communications) to ensure repeatable execution.
Own and regularly exercise incident response playbooks (e.g., ransomware, business email compromise, insider threat, cloud compromise), including tabletop exercises and after-action reviews.
Lead security monitoring and detection engineering (log onboarding, alert tuning, false-positive reduction, and coverage mapping such as MITRE ATT&CK).
Implement and govern risk-based vulnerability and exposure management (prioritization, remediation SLAs, exception/risk acceptance, and reporting to technology owners and leadership).
Lead engineering and operational support of IT security solutions, tools, and systems (e.g., SIEM, EDR, email security, IAM-related monitoring, network security monitoring, DLP, vulnerability scanning).
Manage performance and outcomes for security operations vendors and service providers (e.g., MDR/MSSP), including SLAs, runbooks, escalations, and continuous service improvement.
Develop and report security operations metrics and dashboards (e.g., MTTD/MTTR, alert fidelity, vulnerability SLA performance) and present trends, risks, and improvement plans to stakeholders.
Drive security operations automation and workflow integration (ticketing, enrichment, containment actions where appropriate) to improve consistency, scalability, and response speed.
Perform and/or oversee security testing of applications, networks, and infrastructure (vulnerability assessments, penetration testing coordination, and validation of remediation).
Support development and operation of data loss prevention (DLP) strategies and tooling; partner with Legal/Privacy on data handling requirements.
Contribute to and coordinate audit and regulatory support efforts with internal and external auditors; create and manage responses to security reports, notifications, and alerts.
Implement solutions observing compliance and control requirements (e.g., SOX, privacy laws, and applicable security standards) and drive continuous improvement of policies, procedures, and control effectiveness.
Manage and develop information security operations staff and/or service partners through goal setting, mentoring, and career development; lead cross-functional security projects.
Maintain a broad knowledge of current and emerging threats, technologies, architectures, and products; identify opportunities to enhance threat intelligence coverage and monitoring capabilities.
Qualifications
Education & Experience
Bachelor's degree or advanced degree preferred; professional security management certification preferred (e.g., CISSP, CISM, CISA, or similar).
10+ years of experience in cybersecurity, including 5+ years of direct experience in security operations (e.g., SIEM, IDS/IPS, network security, email security, endpoint security, vulnerability management, and incident response).
5+ years of management/leadership experience, including managing people, projects, budgets, vendors, and operational processes.
Experience with SOC models and operations, including use-case development, alert tuning, and incident escalation practices.
Experience with vendor management, including contract negotiations, service delivery oversight, and maximizing the use of third-party resources (e.g., MDR/MSSP).
Experience in ITIL, including change management principles and practices.
Experience with gap assessments, penetration testing approaches, and patch/vulnerability remediation coordination.
Experience with modern security tools across key domains (SIEM, EDR, MDR, EASM, network defense, vulnerability scanning, encryption, and cloud security).
Pharmaceutical industry experience strongly desired.
Knowledge
· Knowledge of regulations, frameworks, and standards, including NIST, ITIL, GDPR, ISO/IEC 27001, and common industry control frameworks.
· Knowledge of SOC operations and security monitoring concepts, including detection engineering, log management, and coverage mapping (e.g., MITRE ATT&CK).
· Knowledge of endpoint, network, email, identity, and cloud security domains, and security-related tools such as EDR, IDS/IPS, anti-malware, patch management, baselining, SIEM, access control, and firewalls.
· Incident response leadership, including triage, containment, eradication, recovery, communications, and post-incident reviews; familiarity with forensics fundamentals.
· Threat mitigation strategies and threat intelligence consumption, including practical application to detection and response.
· Security groups, consortiums, and related networking forums and services.
Skills & Abilities
Strong ability to communicate information security and risk-related concepts to technical and non-technical audiences at various hierarchical levels, ranging from senior leaders to technical specialists.
Strong critical analysis and problem-solving skills, including diagnosing, troubleshooting, and recommending solutions.
Ability to manage multiple time-sensitive priorities without diminished effectiveness.
Ability to determine & apply the root cause of security events.I Understanding and knowledge of industry best practice methodologies
Highly developed organizational and management skills
Physical Requirements
Hybrid work environment - 3 days a week onsite
Office Environment
Keenova offers employees a Total Rewards package which includes competitive pay and benefits. To learn more about our Total Rewards benefits please visit: Keenova Careers | Serve and Grow with Purpose | Keenova (https://www.keenova.com/careers/)
The expected base pay range for this position is $185,000 - $205,000. Please note that base pay offered may vary depending on factors including job-related knowledge, skills, and experience.
LI-HYBRID
At Keenova, we believe that no one should be alone in their pursuit of better health. This purpose drives us as we pair quality therapeutics with human support-showing up in big moments and small to help patients find comfort and confidence.
We bring deep expertise and resolve to every therapeutic area we serve, including immunology, urology, men's health, orthopedics, critical care, and pediatric endocrinology. We work with patients, care partners, and physicians to help them navigate healthcare system complexity and access therapies that make a meaningful difference.
We are Keenova-keen to solve, keen to serve. Learn more at www.keenova.com .
At Keenova, we know that we contribute to something that matters because we make quality products that impact patient lives. Our dynamic work environment provides unique experiences for employees to grow and develop.
Invest in your own career with Keenova and let's do something dynamic together.
Keenova provides equal employment opportunities to applicants and employees without regard to race; color; gender; gender identity; sexual orientation; religions practices and observances; national origin; pregnancy, childbirth, or related medical conditions; protected veteran status; disability; or any other category protected by law.
Additional information on Keenova's hiring practices may be found by clicking (https://secure.compliance360.com/ext/ESLKi3LFkqY=)
