Job Description:
The Manager, Cybersecurity Operations owns day to day security operations and incident response, with a strong focus on Microsoft Azure, Microsoft 365 (including Defender, Purview, DLP, and IRM), and key SaaS platforms. This role provides both strategic and hands‐on leadership for the security operations team and is accountable for the effectiveness and maturity of security operations in support of the company's risk management and compliance programs.
Essential Job Functions:
Lead the security operations function, including monitoring, triage, and response for alerts across Azure, Microsoft 365, Windows 365, endpoints, identity, email, and core SaaS applications. Direct and coordinate Managed Detection and Response (MDR) and SOC partners, ensuring clear runbooks, effective SLAs, and high quality investigations and escalations. Manage and coach the security operations team, partnering with Infrastructure, Applications, Legal, Compliance, and business leaders to embed security into day to day processes. Establish a healthy check and balance between IT and cybersecurity so IT focuses on delivery and operations while cybersecurity independently governs, monitors, and enforces controls across the environment. Develop, maintain, and continuously improve runbooks and standard operating procedures for common security events and operational tasks. Oversee root cause analysis, basic forensics, and threat hunting activities across identity, email, endpoint, and cloud workloads. Drive incident lifecycle management: tracking metrics, trends, remediation progress, and lessons learned for technology and business leadership. Support protection of "crown jewel" assets through data classification, conditional access, and policy enforcement across Microsoft 365 and key business systems. Partner in governance activities, including GRC platform administration, NIST based control assessments, InfoSec steering committee inputs, and security improvement tracking. Perform vendor cybersecurity due diligence (e.g., security questionnaires, DDQs, monitoring enrollment) and manage third party risk operations in partnership with Procurement and Legal. Maintain an accurate inventory of security relevant assets (devices, SaaS applications, privileged accounts) to support monitoring, access control, and vulnerability management. Contribute to security awareness efforts, including annual training, Cybersecurity Awareness Month activities, and targeted campaigns. Partner with the Director of Infrastructure and Security on KPIs, operational risk metrics, and budget planning for tools, services, and managed partners. Identify and recommend opportunities to automate and streamline security operations and system administration.
Skills and Qualifications:
Bachelor's degree in computer science, information systems, cybersecurity, or equivalent experience; 5+ years of progressive cybersecurity experience with demonstrated leadership responsibility. Hands‐on experience with IAM, SIEM, and vulnerability management tools, ideally in a Microsoft‐centric environment (Azure AD/Entra ID, Microsoft 365, Defender suite).Strong understanding of cybersecurity frameworks and controls (e.g., NIST CSF, ISO 27001, CIS) and their application in day‐to‐day operations and governance. Proven ability to lead incident response, coordinate cross‐functional stakeholders, and communicate clearly with technical and non‐technical audiences. Demonstrated skills in team leadership, collaboration, project management, and written and verbal communication; strong attention to detail and adaptability in a fast‐changing environment
Working Conditions:
This is a hybrid position based in Xeris' Chicago office. A minimum of three days per week in the office is required. On-site requirement may change at management's discretion. Position may require periodic evening and weekend work, as necessary to fulfill obligations. Periodic overnight travel. The anticipated base salary range for this position is $120,000 to $165,000.#LI-HYBRIDXeris Pharmaceuticals, Inc. (the "Company") is an equal opportunity employer and does not discriminate based on race, color, religion, sex, gender identity, sexual orientation, national origin, age, disability, veteran status, genetics or any other characteristic protected by law. All qualified candidates are given equal opportunity and the Company's employment selection decisions are based solely on job-related factors.
NOTE:
This job description is not intended to be all-inclusive. The employee may be required to perform other related duties as needed to meet the ongoing needs of the Company. The level of the position will be determined based on the selected candidate's qualifications and experience. Final determination of the actual base salary offered depends on several factors, including but not limited to the candidate's skills, experience, education, location, and business needs. Employees are eligible for equity or long-term incentive awards, where applicable. Field Sales role employees are eligible for a quarterly commission structure. Non-Sales role employees are eligible for an annual bonus. The Company also offers a comprehensive benefits package that includes additional elements such as paid time off benefits, various health, vision, and dental insurance options, 401(k) retirement benefits and more for eligible employees. Details about these and other offerings will be provided at the time a conditional offer of employment is made. Candidates are always welcome to inquire about our compensation and benefits package during the interview process. Individuals hired as temporary employees, interns, and preceptors are not eligible for commissions, bonuses, and/or long-term incentive or equity awards. Eligibility for other benefits will be based on plan documents.
Accessibility & Reasonable Accommodations:
If, because of a medical condition or disability, you require a reasonable accommodation or assistance to complete any part of the application process, please send an e-mail to recruiting@xerispharma.com and identify the type of accommodation or assistance you are requesting. Please include the job requisition number in your message. Please note if your request is not for this stated purpose, you will not receive a response to your email. Do not include any medical or health information in this email. Xeris participates in E-Verify. E-Verify Participation PosterEEO is the Law EEO is the LawEEO is the Law Supplement EEO is the Law Supplement Pay Transparency Nondiscrimination Provision Pay Transparency Nondiscrimination Provision
Summary
Location: Chicago, IL
Type: Full time
