Senior Manager, Infrastructure Protection Operations

Position Summary
We are seeking an experienced Senior Manager of Infrastructure Protection Operations to strengthen the security and resilience of our enterprise infrastructure. Reporting to the Vice President of Network & Infrastructure Protection Operations this leadership role is responsible for managing the IPO team and ensuring the successful delivery of all services in the Infrastructure Protection & Operations charter. The Manager of IPO focuses on operational oversight of security controls (vulnerability management endpoint security network security operations compliance etc.) driving service delivery and collaborating with technology teams to maintain a secure compliant and highly resilient environment.

Primary Responsibilities

• Team Leadership & Development: Manage and mentor a team of infrastructure security professionals. Oversee staffing coaching performance management and skills development to build a high-performing IPO team fostering a culture of accountability continuous improvement and collaboration.
• Vulnerability Management Program: Oversee the end-to-end vulnerability management program including vulnerability scanning patching and remediation activities across servers endpoints and network devices. Ensure remediation timelines meet defined Service Level Agreements (SLAs) and escalate exceptions or delays to senior leadership. Track and report on vulnerability metrics to drive accountability and risk reduction.
• Endpoint Security & Hardening: Ensure robust endpoint security by overseeing the teams management of antivirus/EDR solutions device hardening and security baseline compliance. Confirm that endpoints (workstations servers etc.) adhere to secure configuration standards and direct timely remediation of any deviations or endpoint risks.
• Network & Application Security Operations: Direct the operational management of network and application security controls. Oversee firewall proxy and web application firewall (WAF) policy enforcement and tuning in line with established security standards and architecture guidance. Ensure the team effectively monitors and responds to security events related to network cloud and application infrastructure maintaining secure configurations and promptly addressing vulnerabilities or misconfigurations.
• Operational Compliance & Audit Readiness: Ensure that infrastructure operations consistently comply with enterprise security policies baselines and regulatory requirements. Supervise recurring operational compliance checks and evidence collection for internal and external audits. Proactively address and remediate compliance deviations maintaining audit readiness and documentation of controls at all times.
• Secure Build Coordination: Collaborate with Cloud Systems Network and Identity & Access Management (IAM) teams to integrate security requirements into infrastructure builds and changes. Validate that new systems and services are built in accordance with secure-by-default Ensure patch cycles backups and recovery processes for new deployments meet security and resilience standards.
• Privileged Access Management Operations: Provide oversight for the enterprises privileged access management (PAM) operations and tooling. Ensure secure administration of privileged account vaults and credentials enforcement of break-glass procedures (in partnership with IAM) and regular review/rotation of privileged access across all infrastructure teams.
• Security Tooling & Monitoring: Ensure effective operation of key infrastructure security tools and monitoring processes. Oversee the team in maintaining and optimizing tools such as vulnerability scanners EDR platforms and configuration compliance systems. Leverage dashboards and reports to monitor infrastructure security alerts and the overall protection posture driving continuous improvements in threat detection and response.
• Governance & ARB Alignment: Represent the IPO team in governance processes and Architecture Review Board (ARB) discussions. Ensure that proposed infrastructure changes meet security control requirements and obtain necessary approvals. Drive the submission and tracking of any security exceptions or control deviations through governance workflows partnering with Enterprise Architecture Security Engineering and other stakeholders to align on secure design and policy enforcement.
• Disaster Recovery Alignment: Maintain disaster recovery (DR) readiness for IPO-managed security tools and processes. Ensure that procedures for recovering critical security infrastructure (e.g. security monitoring consoles vulnerability scanners policy stores) are documented and periodically tested. Align the IPO teams DR plans with the broader enterprise DR/BCP (Business Continuity Plan) to guarantee rapid restoration of security capabilities during disruptions.
• Security Engineering Partnership: Drive alignment between Security Engineering priorities and Infrastructure Operations and Architecture outcomes to support the desired future technology footprint (secure compliant and supportable).

Qualifications

• Bachelors degree in Information Security Computer Science or a related field (or equivalent experience).
• 7 years of experience in enterprise IT infrastructure security operations or systems administration including at least 3 years in a people leadership role (such as team lead supervisor or manager).
• ITIL 4 Certification completed or ability to complete within 90 days of employment.
• Strong technical background in vulnerability management endpoint security network security operations and infrastructure protection. Hands-on experience with patch management processes endpoint protection (AV/EDR) and firewall/proxy administration.
• Deep understanding of security frameworks standards and compliance requirements (e.g. CIS benchmarks NIST CSF ISO 27001) and a track record of ensuring operational adherence to these standards.
• Excellent leadership communication and collaboration skills. Proven ability to work cross-functionally with infrastructure cloud architecture and security teams to drive initiatives in a complex enterprise environment.
• Ability to achieve outcomes with contracted or managed service provider resources as well as internal teams.
• Must be legally authorized to work in the United States without current or future sponsorship

Preferred Skills

• Masters degree in Cybersecurity Information Assurance or a related field.
• Relevant industry certifications such as CISSP CISM CRISC or GIAC certifications (e.g. GCCC GCWN).
• Familiarity with enterprise security tools and platforms (e.g. vulnerability management systems like Tenable Rapid7 or Qualys endpoint detection & response platforms like CrowdStrike and configuration compliance tools).
• Experience implementing automation or process improvements in security operations to increase efficiency and consistency.

This position is an exempt position. The annualized base pay range for this role is expected to be between $120000 - $150000 base salary compensation range. Actual base pay may vary based on factors including but not limited to experience subject matter expertise geographic location where work will be performed and the applicants skill set. The base pay is just one component of the total compensation package. Other rewards may include an annual cash bonus and a comprehensive benefits package including but not limited to medical dental vision life insurance and 401(k). Please note that the job title is subject to change based on the selected candidates experience and education.

About Focus Financial Partners

Focus is a leading financial services firm comprised of integrated wealth management family office and business management services. Blending deep expertise and expansive resources with a boutique client-first fiduciary philosophy Focus helps individuals families and institutions navigate complex financial situations with highly personalized solutions tailored to their unique needs. To learn more about Focus visit follow the company onLinkedIn.

Focus is an equal opportunity employer and bases its employment decisions on the employee or candidates skillset and without regard to an employee or candidates race color religion sex (including pregnancy) gender identity sexual orientation national origin age disability genetic information veteran status or any other characteristic protected by local state and/or federal law.

Focus complies with federal and state disability laws and makes reasonable accommodations for applicants and employees with disabilities. If reasonable accommodation is needed to participate in the job application or interview process to perform essential job functions and/or to receive other benefits and privileges of employment please contact .

The following language is for US based roles only

For California Applicants:Information on your California privacy rights can be found here

For Indiana Applicants: It is unlawful for an employer to discriminate against a prospective employee on the basis of status as a veteran by refusing to employ an applicant on the basis that they are a veteran of the armed forces of the United States a member of the Indiana National Guard or a member of a reserve component.

For Maryland Applicants: I UNDERSTAND THAT UNDER MARYLAND LAW AN EMPLOYER MAY NOT REQUIRE OR DEMAND AS A CONDITION OF EMPLOYMENT PROSPECTIVE EMPLOYMENT OR CONTINUED EMPLOYMENT THAT ANY INDIVIDUAL SUBMIT TO OR TAKE A POLYGRAP OR SIMILAR TEST. AN EMPLOYER WHO VIOLATES THIS LAW IS GUILTY OF A MISDEMEANOR AND SUBJECT TO A FINE NOT EXCEEDING $100.

For Massachusetts Applicants: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this shall be subject to criminal penalties and civil liability.

For Montana Applicants: If hired the employment relationship is governed by the Wrongful Discharge from Employment Act. Mont. Code Ann. Section.

For Rhode Island Applicants: Focus is subject to Chapters 29-38 of Title 28 of the General Laws of Rhode Island and is therefore covered by the states workers compensation law. If you willfully provide false information about your ability to perform the essential functions of the job with or without reasonable accommodations you may be barred from filing a claim under the provisions of the Workers Compensation Act of the State of Rhode Island if the false information is directly related to the personal injury that is the basis for the new claim for compensation. The Company complies fully with the Americans with Disabilities Act.