Manager, Security Operations

Overview

At KeHE, we’re obsessed with creating solutions, unboxing potential, and serving others – and it all starts with you. As an employee-owned distributor of natural and organic, specialty, and fresh products, we’re committed to making a positive impact and scaling our success together. With a culture that fosters development and opportunity, you’ll be embarking on a career that’s moving forward. When you join KeHE, you’re becoming part of a team that is a force for good.

Responsibilities

The Security Operations Manager leads and actively contributes to the organization’s information security operations. This role owns day-to-day security operations and detection, builds and operates the vulnerability management function. The role partners closely with internal teams, and external service partners to reduce risk, respond to incidents, mature security processes, and build a scalable program with direct reports, budget input, and tool ownership consolidating under it. As with all positions at KeHE Distributors, we expect that all actions will be consistent with KeHE’s Mission, Vision, and Values.

Qualifications

EDUCATION AND EXPERIENCE:

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or related field; or equivalent practical experience.
• Minimum of 5+ years experience in information security, with minimum of 2 years’ experience in a lead or management capacity.
• Experience building or maturing security functions, rather than solely operating within established programs.
• Experience with incident response, including investigation, coordination, and post-incident improvement.
• Experience managing managed detection and response or MSSP partnerships, including holding a provider accountable to coverage and service outcomes.
• Experience developing security policies, standards, and risk management processes, supporting audit or certification programs, building vendor or third-part risk management processed, or mentoring/managing security staff preferred..
• Relevant information security certification (e.g., CISSP, CISM, GCIH, GCIA, or comparable), or equivalent demonstrated experience (or ability to obtain within 12 months).

PHYSICAL REQUIREMENTS:

• This position operates in a hybrid working environment, with in-person presence Tuesday, Wednesday, and Thursday (remote work available Monday and Friday, as business needs allow).
• Ability to work in a standard office environment which requires sitting and viewing monitor(s) for extended periods of time, operating standard office equipment such as, but not limited to, a keyboard, copier and telephone.
• Limited travel as needed to Company locations and third-party locations within the US.