Job description

NOTE: Individual(s) must be legally authorized to work in the United States without the need for immigration support or sponsorship from Milliman now or in the future. POSITION SUMMARY: The Cybersecurity Operations Manager leads the day-to-day delivery and continuous improvement of Milliman's global security operations capabilities. This role manages security operations analysts and security engineers responsible for threat monitoring, detection, investigation, containment, and remediation; incident response management and triage; maintenance of incident response standards; and the planning and delivery of tabletop exercises. The team also maintains the platforms and controls that protect the organization. Reporting to the Chief Information Security Officer (CISO), this position combines people leadership, technical depth, operational discipline, and cross-functional partnership. The manager owns team performance, workforce planning, annual reviews, professional development, operational metrics, technology lifecycle management, and the execution of security initiatives across a geographically distributed organization. The role works closely with IT Operations, Infrastructure, Privacy, Risk, Compliance, Legal, and business stakeholders to strengthen resilience, reduce risk, and enable secure business operations. RESPONSIBILITIES: • Manage the operation and lifecycle of SIEM, EDR, security scanning, firewall, secure web gateway, and related security technologies. • Manage Security Operations Analysts and Security Engineers, including performance management, annual reviews, workload oversight, and professional development. • Establish operating procedures, escalation paths, on-call expectations, and service levels, and support the delivery of artifacts for internal and external security audits. • Develop and maintain dashboards, key performance indicators, risk indicators, and executive reporting that demonstrate operational performance, control effectiveness, exposure, and trends. • Partner with infrastructure, cloud, identity, network, endpoint, application, and privacy teams to embed security requirements and improve preventive, detective, and responsive controls. • Lead security projects and cross-functional initiatives, balancing operational priorities with strategic commitments and ensuring clear ownership, communication, and delivery. SKILLS & QUALIFICATIONS REQUIRED: • The ideal candidate must have minimum 8 years of business experience in the areas of Information Security. • The ideal candidate must have working knowledge of auditing, policy, database and firewall security, risk analysis, identity and access management, and web services. • The ideal candidate must have prior experience supervising and professional development of staff in the Information Security field. • Must have prior experience working with geographically diverse offices in a global organization. • Must have the ability to interpret information security data and processes to identify potential compliance issues. • Must have Knowledge of security and control frameworks such as ISO 27001/27002, NIST Cybersecurity Framework, NIST SP 800-53, HIPAA, and HITRUST. LOCATION: • This is a remote role. This job posting is expected to close on November 13 th , 2026 COMPENSATION: The overall range for this role is $150,348 - $285,274. For candidates residing in: • Alaska, California, Connecticut, Illinois, Maryland, Massachusetts, New Jersey, New York City, Pennsylvania, Virginia, Washington, or the District of Columbia the range is $172,900 - $285,274. • All other locations the range is $150,348 - $248,064. A combination of factors will be considered, including, but not limited to, education, relevant work experience, qualifications, skills, certifications, etc.  BENEFITS: We offer a comprehensive benefits package designed to support employees’ health, financial security, and well-being. Benefits include: • Medical, Dental and Vision – Coverage for employees, dependents, and domestic partners. • Employee Assistance Program (EAP) – Confidential support for personal and work-related challenges. • 401(k) Plan – Includes a company matching program and profit-sharing contributions. • Discretionary Bonus Program – Recognizing employee contributions. • Flexible Spending Accounts (FSA) – Pre-tax savings for dependent care, transportation, and eligible medical expenses. • Paid Time Off (PTO) – Begins accruing on the first day of work. Full-time employees accrue 15 days per year, and employees working less than full-time accrue PTO on a prorated basis. • Holidays – A minimum of 10 paid holidays per year. • Family Building Benefits – Includes adoption and fertility assistance. • Paid Parental Leave – 11 weeks of paid leave for employees who meet eligibility criteria. • Life Insurance & AD&D – 100% of premiums covered by Milliman. • Short-Term and Long-Term Disability – Fully paid by Milliman. ABOUT MILLIMAN: Independent for over 77 years, Milliman delivers market-leading services and solutions to clients worldwide. Today, we are helping companies take on some of the world’s most critical and complex issues, including retirement funding and healthcare financing, risk management and regulatory compliance, data analytics and business transformation. Through a team of professionals ranging from actuaries to clinicians, technology specialists to plan administrators, we offer unparalleled expertise in employee benefits, investment consulting, healthcare, life insurance and financial services, and property and casualty insurance. EQUAL OPPORTUNITY: All qualified applicants will receive consideration for employment, without regard to race, color, religion, sex, sexual orientation, national origin, disability, or status as a protected veteran. #LI-HM1| #LI-REMOTE

Requirements

Must-haves

NOTE: Individual(s) must be legally authorized to work in the United States without the need for immigration support or sponsorship from Milliman now or in the future.
Manage the operation and lifecycle of SIEM, EDR, security scanning, firewall, secure web gateway, and related security technologies.
Manage Security Operations Analysts and Security Engineers, including performance management, annual reviews, workload oversight, and professional development.
Establish operating procedures, escalation paths, on-call expectations, and service levels, and support the delivery of artifacts for internal and external security audits.
Develop and maintain dashboards, key performance indicators, risk indicators, and executive reporting that demonstrate operational performance, control effectiveness, exposure, and trends.
Partner with infrastructure, cloud, identity, network, endpoint, application, and privacy teams to embed security requirements and improve preventive, detective, and responsive controls.
Lead security projects and cross-functional initiatives, balancing operational priorities with strategic commitments and ensuring clear ownership, communication, and delivery.
The ideal candidate must have minimum 8 years of business experience in the areas of Information Security.
The ideal candidate must have working knowledge of auditing, policy, database and firewall security, risk analysis, identity and access management, and web services.
The ideal candidate must have prior experience supervising and professional development of staff in the Information Security field.
Must have prior experience working with geographically diverse offices in a global organization.
Must have the ability to interpret information security data and processes to identify potential compliance issues.
Must have Knowledge of security and control frameworks such as ISO 27001/27002, NIST Cybersecurity Framework, NIST SP 800-53, HIPAA, and HITRUST.
This is a remote role. This job posting is expected to close on November 13 th , 2026

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: ukg
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Pto

Paid Time Off

Parental Leave

Professional Development