Manager, Information Security

Manager, Information Security Blue Shield of CA United States, California, El Dorado Hills 4205 Town Center Boulevard (Show on map) Jun 12, 2026 Your Role The Information Security Threat Detection and Response team uses advanced technologies like AI-driven threat detection and automated response platforms to monitor and respond to cybersecurity threats in real time. It acts as the hub for defense strategies, security tool integration, and rapid, data-driven decisions to protect the organization's digital ecosystem. The Manager, Incident Response will report to the Senior Manager, Threat Detection & Response. In this role, as a forward-thinking leader, you will be responsible for evolving our Security Operations Center (SOC). This role is critical to our mission of safeguarding patient data, maintaining compliance, and ensuring the resilience of technology systems-through both traditional security operations and the strategic use of automation and AI-based security technologies. Our leadership model is about developing great leaders at all levels and creating opportunities for our people to grow - personally, professionally, and financially. We are looking for leaders that are energized by creative and critical thinking, building and sustaining high-performing teams, getting results the right way, and fostering continuous learning. Your Knowledge and Experience Bachelor's degree or equivalent experience
At least 10-years prior relevant experience, including 4 years of management experience and at least 1 year of leading one or more critical cybersecurity functions
Requires strong knowledge of security operations, incident response, SIEM platforms, and threat detection technologies
Requires direct experience building and leading a high functioning 24x7 SOC operation, security incident management, and investigations & forensics function
Familiarity with frameworks such as MITRE ATT&CK, NIST, HIPAA, and CIS Controls
Requires exceptional communication skills with both technical teams and non-technical stakeholders
Industry certifications such as CISSP, CISM, GIAC, or equivalent highly desired
Strong understanding of Agile delivery models and backlog management
Ability to manage multiple complex workstreams and successfully interact with all levels of management
Experience with regulatory certifications such as HIPAA, SOC2, PCI-DSS and FedRAMP
Understanding of advanced management approaches such as scheduling for internal & external resources, prioritizing across competing requests, budget management and oversight, coaching & mentoring direct reports, risk management, and delegation
Excellent verbal / written communication, collaboration, analytical and presentation skills
Experience with AI/ML concepts and tools desired
Preferred experience working within the Healthcare industry Hybrid This role requires employees to be in - office based on our hybrid workplace model, balancing purposeful in - person collaboration with flexibility. For most teams, this means coming into the office two days each week. Employees living more than 50 miles from an office location will work with their manager to determine in-office time based on business need. #LI-CP4