Arbonne, is an international social selling company founded in 1980 in the United States (headquartered in Irvine, CA) by Norwegian entrepreneur Petter Mørck. We are proud to be a Certified B Corporation which means we are part of a global movement of for-profit businesses, building an inclusive and sustainable economy that works for everyone.
Our employees are at the heart of this movement, representing our Core Values of Accountability, Community, Courage, and Innovation. We create products lines that include vegan skincare, cosmetics, and nutrition and have an immediate opportunity for a highly skilled and motivated professional to join our team.
Why are you here:
The Manager of Cyber Security Operations is responsible for the day-to-day management and operation of Arbonne’s cybersecurity and compliance programs. This hands-on role focuses on ensuring the effective implementation and maintenance of security controls, managing security incidents, and maintaining compliance with relevant regulations. The role involves direct management of a security team, as well as coordination with third-party vendors and other teams to ensure a robust cybersecurity posture.
What you’ll be doing:
Security Operations Management:
- Oversee daily cybersecurity operations, including monitoring, incident response, vulnerability management, and security configuration management.
- Manage relationships with third-party vendors, ensuring that their services align with The Company’s security requirements and objectives.
- Incident Response and Threat Management:
- Lead the team in responding to cybersecurity incidents, ensuring timely investigation, documentation, and resolution of security events.
- Proactively identify, assess, and mitigate security threats through continuous monitoring and threat hunting activities.
- Coordinate with the Security Operations Center (SOC) to manage alerts and incidents, ensuring swift action is taken to protect the enterprise.
Compliance and Audit Support:
- Ensure ongoing compliance with relevant regulations, such as PCI, GDPR, and CCPA/CPRA, through regular audits, assessments, and policy updates.
- Assist in the development and implementation of security policies and procedures, ensuring they are in line with industry standards and best practices.
Team Leadership and Development:
- Manage and mentor a team of cybersecurity professionals, providing guidance, training, and performance evaluations.
- Foster a culture of continuous improvement and professional development within the team, ensuring they stay up to date with the latest security trends and technologies.
- Each employee is responsible for raising awareness of our commitment to Corporate Social Responsibility and should actively participate in activities and initiatives which are designed to have a positive impact on the environment and local communities.
- As a people leader of a purpose driven company, you are responsible for establishing personal social and environmental goals and ensuring each of your direct reports have individual social and environmental goals.
Technical Security Implementation:
- Oversee the deployment and maintenance of security tools, systems, and processes, ensuring they are effectively integrated into the company’s IT infrastructure.
- Work closely with IT and other departments to ensure that security is embedded in all technology projects and initiatives.
What you need:
- 5+ years of hands-on experience in cybersecurity operations, including incident management, threat monitoring, and vulnerability management.
- Proven experience in managing a team of security professionals and working with third-party vendors.
- Strong understanding of cybersecurity frameworks, such as CIS, NIST, ISO 27001, etc.
Technical Knowledge:
- Proficiency with security tools and technologies, including SIEM, EDR, vulnerability management systems, and network security tools.
- Experience with cloud security in environments such as Azure, AWS, or GCP.
Soft Skills:
- Excellent problem-solving skills with a strong focus on operational efficiency.
- Effective communication skills, with the ability to translate technical concepts to nontechnical stakeholders.
- Strong leadership abilities, with a focus on team development and collaboration.
- Commitment to model and live out our Core Values (Accountability, Community, Innovation and Courage) and a positive mindset are critical for success and should reflect in everything you do.
Preferred Certifications:
- CISSP, CISM, or similar certifications.
- Familiarity with data privacy certifications (e.g., CIPP, CIPM).
The salary for this position is $160,000
Arbonne International is committed to employing a diverse workforce. Qualified applicants will receive consideration without regard to race, color, religion, sexual orientation, national origin/ancestry, age, sexual orientation, gender identity, gender expression, military/veteran status, marital status, disability status, or any other basis prohibited by law. At Arbonne International, it's about each person bringing passion and skills to a dynamic and inclusive workplace!