Security Operations Manager Information Technologist IIIS

Security Operations Manager

As part of the Information Security Office and reporting to the Chief Information Security Officer (CISO) the Security Operations Manager providessupervisory and technical leadershipfor the Security Operations (SecOps) team. This roleis responsible forthedaytodaymanagement and execution of operational cybersecurity servicesaligned to theNIST Cybersecurity Framework (CSF) 2.0 with emphasis on detection response and protection activities.

The position combineshandsontechnical oversightwithstaff supervision operational coordination and continuous service improvement ensuring security operations are effective reliable and responsive to institutional needs.

Note: This position is hybrid and requiresat least 2days of workon campus.

• Coordinate and overseesecurity monitoring alert triage and threat detectionactivities
• Ensure consistent execution ofincident response procedures including escalation documentation andafteractionfollowup
• Manage operational aspects ofvulnerability identification analysis and remediation coordination
• Oversee daily operation and health of security technologies (e.g. SIEM endpoint protection network security email security)
• Translateassignmentsinto clear operational tasks procedures and expectations for staff
• DirectlysuperviseSecurity Operations staff including work assignment prioritization and performance feedback
• Providetechnical guidance mentoring and coaching to support staff development
• Support onboarding training and skill development aligned with operational needs
• Contribute to staffing plans workload balancing and coverage planning
• Ensure all operational work is logged prioritized and updated in theInformation Technology Service Managementsystem.
• Developmaintainand improvedocumented runbooks procedures and playbooksfor security operations
• Identifyoperational gaps recurring issues and improvement opportunities
• Participate in service maturity discussions and help move services towardrepeatable andwelldefinedpractices
• Support audits assessments and reviews by providing operational input and evidence
• Work closely with other Information Security teams (GovernanceRisk andCompliance AccessManagement Security Engineering and Incident Response) to support coordinated outcomes
• Partner with central and federated IT units to resolve incidents and operational security issues
• Communicate operational risks trends and incidents clearly to management and stakeholders

Michigan State University (MSU) is ranked #29among public universities and #64overall in U.S. News & World Reports Americas Best Colleges 2026. Located in East Lansing three miles east of the statescapital the MSU community includes more than 12000 faculty academic and support staff as well as over 51000 students. MSU offers an extensive benefits package to its employees including health care prescription and dental coverage and a base retirement program with aUniversitymatching contribution as well as basic life addition MSU offers educational benefits including a course fee courtesy program and educationalassistance.

MSU Information Technology provides the primary leadership for strategic financial and policy initiatives affecting information technology (IT) across MSU. MSU IT offers technology resources that support MSUs mission of providing education conducting research and advancing engagement.

Knowledge equivalent to that which normally would be acquired by completing a four-year college degree; with coursework in an information technology specialization related to the area of employment; and five to eight years of related and progressively more responsible or expansive work experience in an information technology area related to the duties to be performed including experience overseeing large complex or critical information technology projects; or an equivalent combination of education and experience.

• Demonstrated experience incybersecurity operations incident response or security monitoring

• Experience supervising staff or leading technical work in an operational IT environment

• Experience in ahigher education or similarly distributed IT environment

• Familiarity with enterprise security tools such as SIEM EDR/XDR firewalls and vulnerability scanning platforms

• Experience improving or formalizing operational processes and documentation

• Working knowledge of theNIST Cybersecurity Framework particularly operational control areas

• Ability to balance technical work staff supervision and service coordination

• Relevant security certifications (e.g. CISSP GCIH GCED or equivalent)

All qualified applicants will receive consideration for employment without regard to race color religion sex sexual orientation gender identity national origin citizenship age disability or protected veteran status.

Resume and cover letter

Please provide three professional references who are knowledgeable of your work.

STANDARD 8-5

MSU strives to provide a flexible work environment and this position has been designated as remote-friendly. Remote-friendly means some or all of the duties can be performed remotely as mutually agreed upon.