Security Operations Manager

Overview

Lead the newly formed internal Security Operations function at 66degrees, owning day-to-day security operations across a global workforce of 550+ employees and reporting directly to the U.S. Director who leads IT, IAM and Security infrastructure.

What you'll do

• Build, own and manage the daily operations of the security toolset: SIEM (Google SecOps or Splunk), EDR/XDR (SentinelOne), Email Security, Cloud Security, and Endpoint Security (Rippling MDM) Posture Management.
• Serve as primary incident lead for system security events: investigate, contain and remediate alerts, and lead post-incident post-mortems as requested.
• Develop, document and maintain security playbooks and SOPs for securing and hardening solutions within the 66degrees tech stack.
• Conduct continuous vulnerability scanning and coordinate patching and remediation cycles across endpoints, networks and cloud environments (GCP, Azure, AWS).
• Partner with the U.S. Director to operationalize, enforce and refine Zero Trust, Device Trust, Browser Trust and IAM policies.
• Monitor, harden and secure core business applications such as Google Workspace, Google Cloud Platform (GCP), Slack, Salesforce and Rippling against misconfigurations and unauthorized access.
• Act as security subject matter expert and internal escalation point for the IT Service Desk team in India and the broader global teams.
• Train and upskill global teams to perform Tier 1 security triage (phishing reports, basic malware alerts, account lockouts, avoiding IT worker scams), creating a scalable company security framework.
• Foster a culture of security awareness by leading regular employee training and simulated phishing campaigns (KnowBe4), and advise on the principle of least privilege.
• Lead the technical GRC buildout (Drata), Trust Center buildout (SafeBase), evidence gathering and control enforcement for external audits and compliance frameworks such as SOC 2 and ISO 27001.
• Assist go-to-market and legal teams by completing client security questionnaires and vendor risk assessments.
• Track and report key SecOps metrics (Time to Detect/Respond, patch compliance, etc.) to IT leadership.

What you'll need

• 8-12+ years of progressive experience in Information Security, IT Security or Security Operations, with at least 2-3 years in a team lead or management capacity.
• Deep technical understanding of Google Workspace administration and security, and cloud infrastructure security specifically for Google Cloud Platform (GCP).
• Hands-on experience building, configuring, monitoring and responding to alerts in EDR platforms (e.g., CrowdStrike, SentinelOne), SIEM platforms (e.g., Splunk, Google SecOps) and IAM platforms (e.g., Rippling, Okta, GCP, Entra, Azure, AWS, GWS).
• Experience operating within compliant environments and supporting audits for SOC 2 Type II or ISO 27001 frameworks.
• Experience setting up and managing a GRC platform (e.g., Drata, Ostendio).
• Proficiency in scripting (Python, PowerShell, Bash or Google Apps Script) to automate repetitive security tasks and API integrations.
• Excellent English communication skills, with a proven ability to bridge time zones and cultural nuances while managing remote/offshore resources.

Nice to have

• Industry-recognized security certifications such as CompTIA Security+, CISSP, CISM, CCSP or GCIA.
• Google Cloud Professional Cloud Security Engineer certification (highly desired).
• Google Cybersecurity Certificate (highly desired).
• Previous experience working in a professional services, consulting or managed services firm.
• Previous experience building an at-scale internal security team.

Details

• Location: India.
• Visa sponsorship or transfer is not available for any visa type at this time.