Senior Director, Security Operations

Location: Bengaluru, India

Experience: Senior leadership

Schedule: Core business hours with accountability for a 24x7 global operation

We are seeking a strategic, operationally rigorous Senior Director of Security Operations to lead our Integrated Security Operations Center (ISOC) in Bengaluru.

You will set the vision, operating model, and performance standards for a high-performing 24x7 security operations function. You will be accountable for the organization’s ability to detect, investigate, contain, and recover from cyber threats-while building a scalable team, mature processes, and strong partnerships across Security, IT, Engineering, Risk, and the business.

This role combines executive leadership with operational ownership. You will lead incident response readiness, detection strategy, threat intelligence, automation, and continuous improvement, ensuring security operations are both effective today and prepared for the organization’s future needs.

Lead security operations

• Define and execute the strategy, operating model, and roadmap for the ISOC.
• Lead a 24x7 security operations team, including managers, analysts, incident responders, and specialized technical resources.
• Establish clear service levels, escalation paths, quality standards, staffing models, and shift-coverage practices.
• Ensure timely, consistent, and risk-based triage, investigation, containment, and recovery for security events and incidents.
• Build a culture of accountability, operational discipline, learning, and continuous improvement.

Own incident readiness and response

• Provide leadership during significant security incidents, coordinating technical, business, legal, communications, and executive stakeholders as needed.
• Ensure incident response plans, playbooks, exercises, and communications processes are current, tested, and effective.
• Drive post-incident reviews that result in meaningful improvements to technology, processes, controls, and organizational readiness.
• Communicate material risks, incident status, and operational performance clearly to senior leadership.

Advance detection, intelligence, and automation

• Set the strategy for detection engineering, threat intelligence, threat hunting, and security automation.
• Ensure detection coverage is aligned to the threat landscape, critical assets, business priorities, and frameworks such as MITRE ATT&CK.
• Oversee the development and tuning of use cases, rules, playbooks, and automation to improve detection quality and reduce response time.
• Establish metrics for detection efficacy, false-positive rates, incident lifecycle performance, coverage, and operational maturity.
• Partner with engineering and platform teams to improve telemetry, visibility, and security tooling.

Build partnerships and scale capability

• Partner with IT, Engineering, Cloud, Identity, Legal, Risk, Privacy, and business leaders to integrate security operations into enterprise processes.
• Manage relationships with security vendors, managed service providers, and other external partners.
• Lead workforce planning, hiring, development, succession planning, and budget management for the function.
• Drive major programs such as new tool adoption, SIEM modernization, automation initiatives, cloud-security integration, and security operations maturity assessments.
• Present strategy, performance, risks, and investment needs to executive leadership.

• Significant experience leading security operations, incident response, or cyber defense teams in a complex enterprise environment.
• Demonstrated success building, scaling, or transforming a security operations center or similar 24x7 function.
• Deep understanding of incident response, threat detection, SIEM, EDR, identity, cloud security, network security, and security automation.
• Experience leading high-severity incident response and communicating effectively with executives and cross-functional stakeholders.
• Strong operational leadership skills, including defining metrics, service levels, processes, staffing models, and improvement roadmaps.
• Experience developing leaders and building inclusive, high-performing technical teams.
• Ability to translate technical risk into clear business implications, priorities, and investment decisions.
• Strong written and verbal communication skills.

• Experience leading global or multi-site security operations teams.
• Experience with cloud-native environments, large-scale identity ecosystems, or complex hybrid infrastructure.
• Familiarity with regulatory, privacy, audit, and third-party-risk requirements.
• Experience with SOAR, SIEM modernization, security data platforms, or AI-assisted security operations.
• Relevant certifications such as CISSP, CISM, GIAC, or cloud-security certifications.
• A degree in cybersecurity, computer science, business, or a related field-or equivalent leadership experience.

You will shape the future of security operations at a foundational moment for the ISOC. Your leadership will strengthen the organization’s ability to respond to threats, reduce operational risk, develop security talent, and build a mature, resilient, intelligence-driven security operations capability.

Key

Responsibilities

Security

Operations - Vulnerability Assessment:

margin-left:.5in;text-indent:-.25in'>-Guides

the execution of critical security testing and vulnerability assessments to

identify, prioritize, and mitigate information security threats and

vulnerabilities in software, networks, and systems.

margin-left:.5in;text-indent:-.25in'>-Governs

remediation processes of multiple functions to ensure appropriate

identification, assignment, and timely remediation, providing strategic

guidance as needed.

margin-left:.5in;text-indent:-.25in'>-Develops

the standards for documentation process and vulnerability advisory documents,

governing the process to ensure alignment.

margin-left:.5in;text-indent:-.25in'>-Develops

policies and standards regarding teams subscribing to vulnerability feeds to

ensure the vulnerability assessments identify issues and assure their

remediation.

Security

Operations - Security Solutions and Programs:

margin-left:.5in;text-indent:-.25in'>-Provides

oversight on the creation and implementation of critical security solutions and

drives the development of organizational security programs to mitigate security

risks.

margin-left:.5in;text-indent:-.25in'>-Governs

the creation of remediation plans to address security risks, proactively

engaging with process owners to monitor and ensure progress.

Security

Operations - Security Event Monitoring:

margin-left:.5in;text-indent:-.25in'>-Defines

and drives the organization's strategic security monitoring strategy, aligning

it with industry best practices and emerging threats.

margin-left:.5in;text-indent:-.25in'>-Presents

comprehensive metrics and reports on detection gaps, coverage, and overall

security posture to executive leadership.

margin-left:.5in;text-indent:-.25in'>-Directs

the overall management of security tools to ensure that they have access to

real-time data.

margin-left:.5in;text-indent:-.25in'>-Guides

the performance and documentation of initial triage of security events for

escalation to incident management.

margin-left:.5in;text-indent:-.25in'>-Governs

gap identification and resolution processes in the current security monitoring

systems, driving innovations of solutions.

Security

Operations - Incident Management:

margin-left:.5in;text-indent:-.25in'>-Guides

the response to and investigation and triage of critical events and incidents,

establishing and refining escalation processes and ensuring top-level

resolution.

margin-left:.5in;text-indent:-.25in'>-Governs

documentation and analysis of security events and alerts and develops

organizational strategies to address and mitigate future threats, while

maintaining direct communication with executive leadership.

margin-left:.5in;text-indent:-.25in'>-Directs

data collection, preservation, log analysis, and highly complex forensic

analysis of digital media.

margin-left:.5in;text-indent:-.25in'>-Evaluates

reporting of incident management and root cause analysis results, guiding

Corrective and Preventative Actions (CAPA) processes.

margin-left:.5in;text-indent:-.25in'>-Provides

strategic oversight on incident response processes.

margin-left:.5in;text-indent:-.25in'>-Guides

the root cause analysis and CAPA processes.

Security

Operations - Collaboration:

margin-left:.5in;text-indent:-.25in'>-Drives

collaboration and alignment with members of other lines of business to address

security concerns and initiatives, fostering a culture of security awareness

and accountability.

margin-left:.5in;text-indent:-.25in'>-Fosters

strategic partnerships with other information security team leaders to

proactively enhance the organizational security posture.

margin-left:.5in;text-indent:-.25in'>-Develops

strategic relationships with Legal, Platform, Product, and security teams

across Lines of Business (LOBs) to identify root causes of issues, work to

address them, and champion innovating new functionality.

Compliance

- Security Compliance Support:

margin-left:.5in;text-indent:-.25in'>-Ensures

rigorous monitoring of the security controls in the IT, operations, or service

environment, guiding the implementation of sophisticated controls required to

meet key security frameworks and regulatory requirements.

margin-left:.5in;text-indent:-.25in'>-Leads

and oversees high-level responses and actions to regulatory or

compliance-related audits, assessments, and inquiries.

margin-left:.5in;text-indent:-.25in'>-Governs

the collection of evidence for various frameworks and management of security

issues for security-related controls that the teams are responsible for,

ensuring that all processes are in place to collect necessary information for

audits and that information is sent to the compliance team.

margin-left:.5in;text-indent:-.25in'>-Oversees

the technical support provided to the compliance team to answer questions in

areas where technical and organizational background is required, providing

strategic guidance as needed.

margin-left:.5in;text-indent:-.25in'>-Leads

strategic coordination between security operations and compliance teams to

facilitate compliance audit and provides support (e.g., participates in

auditing kickoff calls, runs through documentation, answers any technical

questions the auditor may have).

Core

responsibilities include:

Planning

& Execution:

margin-left:.5in;text-indent:-.25in'>-Provides

strategic oversight on the management and execution of large-scale projects or

initiatives, monitoring timelines, deliverables, and budgets when applicable to

ensure success.

margin-left:.5in;text-indent:-.25in'>-Sets

strategies for appropriately delegating work, setting priorities, and aligning

projects with business needs.

margin-left:.5in;text-indent:-.25in'>-Drives

the strategic planning process across teams, providing guidance on resources or

timelines in anticipation of changes.

Collaboration

& Partnership:

margin-left:.5in;text-indent:-.25in'>-Sets a

strategic direction for collaborating with cross-functional teams to ensure

alignment of expectations and strategic objectives.

margin-left:.5in;text-indent:-.25in'>-Drives a

culture of teamwork, empowering teams to build and maintain partnerships with

business leaders, stakeholders, and/or customers to contribute to

organizational success.

margin-left:.5in;text-indent:-.25in'>-Promotes

a culture of transparency and inclusivity where all voices are valued and

respected.

Problem

Solving:

margin-left:.5in;text-indent:-.25in'>-Develops

and implements strategies for specialized, advanced problem-solving efforts

across the organization, serving as an escalation point for highly complex

operational and/or technical issues.

margin-left:.5in;text-indent:-.25in'>-Oversees

teams leveraging innovative techniques to address significant ambiguous issues,

identify root causes, and prevent recurrence, reviewing solutions as needed.

Continuous

Learning:

margin-left:.5in;text-indent:-.25in'>-Champions

continuous learning to maintain cutting-edge skills and influence

organizational best practices.

margin-left:.5in;text-indent:-.25in'>-Inspires

teams to build and maintain expertise in relevant areas by proactively

monitoring emerging trends, technologies, and industry standards to help

position the organization as an industry leader.

margin-left:.5in;text-indent:-.25in'>-Contributes

to the organization’s strategy for learning and development, influencing

leadership to foster learning opportunities for the team.

Continuous

Improvement:

margin-left:.5in;text-indent:-.25in'>-Drives a

culture of continuous improvement that sets a standard for efficient and

effective processes, protocols, and workflows across the organization.

margin-left:.5in;text-indent:-.25in'>-Oversees

work to implement large-scale approaches and methods for continued improvement,

ensuring changes align with organizational goals.

margin-left:.5in;text-indent:-.25in'>-Sets the

strategic direction, prioritizes, and approves the roadmap of improvement

initiatives to maximize return on investments.

Performance

and Development:

margin-left:.5in;text-indent:-.25in'>-Drives

and ensures consistent application of performance management strategies,

systems, processes, and guidelines across the organization.

margin-left:.5in;text-indent:-.25in'>-Creates

an organizational culture of career development that encourages proactively

identifying and pursuing career development opportunities and guiding leaders

to support their team's growth.

margin-left:.5in;text-indent:-.25in'>-Drives

consistency in the application of talent development procedures and socializes

performance expectations across the organization.

margin-left:.5in;text-indent:-.25in'>-Partners

with HR and executive leadership to envision and execute a talent management

strategy, balancing budget and talent resources.