Director, (Cyber) Security Operations

August 29, 2026

Other Jobs To Apply

No other job posts for this day.

Relias LLC Morrisville, United States, 27560 hybrid USD 150,000 - 170,000 (Yearly) Company Description Are you looking for a high energy, strategic, and fast-paced position with an impactful and mission-driven company? Join Relias, the company changing lives throughout the world by helping healthcare organizations improve their clinical and financial outcomes! For 11,000+ health care and human service organizations, Relias helps clients deliver better clinical and financial outcomes by elevating the performance of teams. We help organizations across the continuum of care get better at maintaining compliance, developing staff and promoting consistent, high-quality care. Our platform employs assessments to reveal specific gaps in skills and addresses them with personalized and engaging learning, choosing from 7,000+ online courses that meet accrediting board, state and federal requirements. We are passionate about our products and our clients; what we deliver and the impact we have on the world is truly something you can be proud to represent. Join us and make a difference. WHAT CAN RELIAS OFFER YOU? <ul><li>Fantastic health and wellness benefits package, including an outstanding 401k match, a flexible PTO program, and a generous and inclusive parental leave policy. Additionally, Relias pays for the employee portion of the monthly healthcare premium!</li><li>Flexible work environment with onsite and work from home options – you choose when you want to come into the office!</li><li>Active Employee Resource Groups open to all employees!</li><li>Comprehensive onboarding program – a great introduction to our company, customers and culture!</li><li>Growth and career advancement opportunities!</li><ul><li>Multiple development program options – leadership development, professional development curriculums, and Nanodegree options in both technology and data science</li><li>Professional development gained from conference attendance and participation in organizations like NC Tech</li><li>Onsite 321 Coffee Shop providing free coffee and pastries to employees </li></ul></ul>Job Description The Director of (Cyber) Security Operations is a cyber leadership role responsible for establishing, directing, and continuously maturing the organization’s security operations capabilities to detect, prevent, respond to, and recover from cybersecurity threats and incidents. This role provides strategic and operational leadership across security monitoring, incident detection and response, threat intelligence, vulnerability operations, logging and telemetry management, and security operations tooling. The Director partners closely with infrastructure, cloud, application, architecture, legal, privacy, compliance, and business stakeholders to ensure operational security capabilities are aligned with enterprise risk priorities, regulatory obligations, and business resiliency requirements. The role is accountable for building and leading a high-performing operations team, defining operational procedures and escalation protocols, driving continuous improvement through automation and metrics, and ensuring the organization can rapidly identify and address cyber events in a manner that protects systems, data, customers, and business operations. What You’ll Be Doing <ul><li> Lead the strategic direction, operating model, and maturity roadmap for the security operations function, including monitoring, detection, response, and operational resilience activities.</li><li> Oversee security operations center (SOC) capabilities, whether internal, outsourced, or hybrid, and ensure monitoring coverage for critical enterprise, cloud, endpoint, identity, network, and application environments.</li><li> Direct the end-to-end incident response lifecycle, including triage, investigation, containment, eradication, recovery, escalation, and post-incident lessons learned.</li><li> Establish and maintain operational processes, standard operating procedures, escalation criteria, and playbooks for security events, incidents, and crisis situations.</li><li> Lead and improve vulnerability operations in partnership with infrastructure, engineering, and application teams, including prioritization, remediation oversight, exception handling, and reporting.</li><li> Manage and optimize core detection and response technologies such as SIEM, SOAR, EDR/XDR, case management, threat intelligence, email security, and related operational tooling.</li><li> Drive detection engineering, use-case development, alert tuning, and automation initiatives to improve fidelity, reduce noise, and accelerate response times.</li><li> Coordinate with legal, privacy, compliance, human resources, communications, and executive leadership during significant cybersecurity incidents and investigations.</li><li> Support digital forensics, threat hunting, and root cause analysis efforts as needed for material incidents or suspicious activity.</li><li> Partner with security architecture, engineering, and IT operations teams to improve control effectiveness, close operational gaps, and strengthen preventive and detective capabilities.</li><li> Lead service reviews and performance oversight for managed security service providers, technology vendors, and other external partners supporting operational security functions.</li><li> Coach, develop, and performance-manage analysts, engineers, and operational leaders while fostering a resilient, accountable, and continuously improving team culture. </li></ul>Qualifications YOU’VE GOT WHAT IT TAKES IF YOU HAVE/ARE: <ul><li> 10+ years of progressive experience in cybersecurity, information security, or related technology roles.</li><li> 5+ years of leadership experience in security operations, incident response, threat detection, or a comparable cyber operations function.</li><li> Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or a related field; or equivalent combination of education and relevant professional experience.</li><li> Demonstrated experience leading security monitoring and incident response programs in a mid-sized or large enterprise environment.</li><li> Experience managing or overseeing SOC operations, including internal teams, managed security service providers, or hybrid operational models.</li><li> Experience leading significant cybersecurity incidents, investigations, and post-incident remediation efforts.</li><li> Experience with vulnerability operations, remediation governance, and security operations tooling strategy and optimization.</li><li> Experience developing operational metrics, executive dashboards, and performance reporting for leadership audiences.</li><li> Experience managing technical teams, vendors, and cross-functional stakeholders in support of enterprise security objectives. </li></ul>Experience/Education Preferred <ul><li> Master’s degree in Cybersecurity, Information Assurance, Computer Science, Business Administration, or a related discipline.</li><li> Professional certifications such as CISSP, CISM, GIAC, GCIA, GCIH, or other relevant security operations, incident response, or leadership credentials.</li><li> Experience in SaaS, cloud-native, highly regulated, or customer-facing technology environments.</li><li> Experience aligning operational practices to recognized frameworks or standards such as NIST CSF, NIST SP 800-61, ISO 27001, CIS Controls, SOC 2, PCI DSS, HIPAA, or other applicable requirements.</li><li> Experience building or maturing detection engineering, threat hunting, digital forensics, or crisis management capabilities.</li><li> Experience supporting customer-facing security reviews, external audits, or regulatory examinations involving operational controls. </li></ul>Additional Information IN OFFICE REQUIREMENT: Relias values collaboration and wants to ensure that our team members have opportuniites to work with their managers regularly for professional development opportunities. This role requires that you live in the state of North Carolina, within a commutable distance to our office. You would be expected to work in our Morrisville, NC Headquarters approximately 40 days/quarter. Relias is an Equal Opportunity Employer and a Drug-Free workplace. Relias welcomes and encourages applications from people with disabilities and is happy to make reasonable accommodations in all aspects of the selection process. If you are an individual with a disability and require reasonable accommodation to complete any part of the job application process, please visit our career page for instructions. All your information will be kept confidential according to EEO guidelines. Disclosure requirements pertaining to the collection of your personal data: Responsible for processing the information provided in your application is the company specified in the job advertisement, with its registered office as indicated. The company processes your data for the purpose of establishing an employment relationship on the basis of Art. 6 (1) b GDPR / Section 26 (1) sentence 1 BDSG. The retention period for your data is determined by the statutory time limits applicable in the respective country, beginning upon completion of the recruitment process. You can find these here . You can contact the company’s Data Protection Officer at the above-mentioned postal address. Further information on data protection and your rights can be found here . Recruiting-Platform powered by SmartRecruiters. Job Segment: Compliance, Cyber Security, Operations Manager, Computer Forensics, Law, Legal, Security, Operations

Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...