Manager, Information Security

The Information Security Manager provides operational and tactical leadership for a defined security service, function, or team. This role translates Information Security strategy, risk requirements, and policies into effective daytoday execution; ensures reliable, compliant service delivery; and fosters a strong security culture. Operating within the Risk organization, the Manager partners with business and technology stakeholders to identify, assess, and manage information security risk in a regulated environment.

The Information Security SOC Manager, Night Shift provides operational leadership and management oversight for the Cybersecurity Operations Center (CSOC) during evening, overnight, and weekend operations. Serving as the primary management authority during assigned shifts, this role is responsible for ensuring continuous cybersecurity monitoring, incident response coordination, workforce supervision, escalation management, and operational execution. The manager leads overnight analysts and engineers, oversees staffing and shift readiness, drives employee development, and ensures adherence to established procedures, service-level agreements, regulatory requirements, and organizational security standards.

This position is accountable for the quality and effectiveness of overnight security operations, including incident escalation, investigation oversight, case management, and operational governance. The manager leverages performance metrics such as MTTD, MTTR, SLA attainment, and detection effectiveness to improve service delivery and SOC maturity while partnering with detection engineering and SOAR teams to enhance detections, playbooks, AI-enabled workflows, and operational processes. Success is measured through stable overnight operations, improved analyst performance, timely incident response, reduced case backlog, strengthened operational resilience, and reduced reliance on daytime leadership for routine after-hours decisions.

This vacancy is not eligible for sponsorship/ we will not sponsor or transfer visas for this position. Also, Mayo Clinic DOES NOT participate in the F-1 STEM OPT extension program.

Bachelors degree in applicable field plus eight (8) years of relevant experience. Pertinent fields of study and experience include, but are not limited to, information security, computer science, information systems, risk management, or a related field. Three years leadership/management experience (i.e. guiding technical staff, leading technical projects, or leading teams).

Master’s degree in applicable field plus six (6) years of relevant experience preferred. Pertinent fields of study and experience include, but are not limited to, information security, computer science, information systems, risk management, or a related field. Three years leadership/management experience (i.e. guiding technical staff, leading technical projects, or leading teams).

One or more of the following certifications (or equivalent) are required at time of hire: CISSP, CISM, GSEC, OSCP..