Vetcor is a community-centric veterinary services company supporting over 900 practices across the US and Canada. Vetcor practices thrive with access to a collaborative network while staying true to themselves and their community. All Vetcor practices have a shared goal of providing excellent care and service to both patients and clients in their communities. As we continue to grow, we are seeking a skilled and experienced Security Operations Manager to join our team and lead the security of our operations, data, and facilities.
About the Role
The Security Operations Manager will lead the day-to-day operations of Vetcor's security operations, with expanded oversight of data security, vulnerability management, and security awareness. This role requires a professional with extensive experience in security operations, incident response, threat management, and information security more broadly. The Security Operations Manager will manage security operations partners and processes, and will work closely with IT, legal, and other departments to ensure a secure and resilient environment across Vetcor's practices.
The Work
Operations Management
- Oversee the daily operations of the Managed Detection and Response Partner.
- Manage and monitor security technologies, including firewalls, intrusion detection systems, and SIEM solutions.
- Ensure the timely detection, analysis, and response to security incidents.
Incident Response
- Develop and maintain incident response plans and procedures.
- Lead the response to security incidents, including investigations, reporting, and remediation.
- Conduct regular drills and training exercises to ensure preparedness.
Threat Management
- Monitor and analyze threat intelligence to identify potential security threats.
- Implement and manage threat detection and prevention technologies.
- Conduct penetration testing and red-team exercises to validate defenses.
Vulnerability Management
- Own the end-to-end vulnerability management program, including scanning, assessment, and prioritization of findings across infrastructure and applications.
- Coordinate timely remediation and patching with IT and practice-level stakeholders, tracking issues to closure against defined SLAs.
- Report on vulnerability posture, trends, and remediation metrics to leadership.
Data Security
- Develop and maintain data security policies, including data classification, encryption, and access control standards.
- Implement and monitor data loss prevention (DLP) controls to protect sensitive patient, client, and business data.
- Partner with IT and practice leadership to ensure secure handling of data across systems, vendors, and integrations.
Security Awareness
- Design and deliver a company-wide security awareness program, including onboarding training and ongoing employee education.
- Run phishing simulations and other awareness campaigns and track and report on employee engagement and risk trends.
- Develop role-specific training content for high-risk teams and communicate emerging threats in accessible, practical terms.
Risk Management and Compliance
- Conduct risk assessments to identify potential security threats and vulnerabilities.
- Develop and implement policies and procedures to mitigate identified risks.
- Ensure compliance with relevant laws, regulations, and industry standards (e.g., PCI, SOX).
Collaboration and Communication
- Collaborate with IT, legal, and other departments to address security needs and concerns.
- Communicate security updates, policies, and procedures to all employees.
- Serve as the primary point of contact for security operations, data security, vulnerability management, and security awareness matters.
What we are Searching For
- Bachelor's degree in Information Technology, Computer Science, or a related field. Advanced degree preferred.
- Minimum of 4 years of experience in security operations, with direct experience in data security, vulnerability management, and/or security awareness programs.
- Proven track record of managing security operations and incident response, ideally including team leadership experience.
- Strong knowledge of security technologies, threat management, data protection practices, and vulnerability management tools and processes.
- Experience designing or running security awareness and training programs.
- Excellent leadership, communication, and interpersonal skills.
- Relevant certifications (e.g., CISSP, CISM, GSEC, Security+) are highly desirable.
