Cyber SOC Team Manager

• Competitive compensation, including base pay and annual incentive
• Comprehensive health and life insurance and well-being benefits, based on location
• Pension / Retirement benefits
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
• DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).

• Be accountable for the overall operational health, performance, and effectiveness of assigned teams and shifts.
• Ensure continuous operational readiness and appropriate staffing coverage across a 24x7 operating model.
• Manage workforce planning, scheduling, staffing forecasts, and resource allocation to meet operational requirements.
• Establish, monitor, and report on key performance indicators, operational metrics, service levels, and quality standards.
• Oversee the execution of monitoring, detection, investigation, and response activities to ensure consistency with established procedures and organizational expectations.
• Drive operational maturity through process optimization, automation, reporting enhancements, and continuous improvement initiatives.

People Leadership

• Create and maintain a high-performing, inclusive, accountable, and collaborative team culture.
• Conduct performance reviews, coaching sessions, development planning discussions, and ongoing career conversations with direct reports.
• Establish clear expectations, objectives, and development goals for employees and managers within the organization.
• Identify, develop, and retain technical and leadership talent.
• Lead recruiting, interviewing, onboarding, succession planning, and retention efforts.
• Effectively delegate responsibilities, empower team members, and remove obstacles impacting team performance.
• Model appropriate leadership behavior, communication, professionalism, and decision-making.

Incident Response Leadership

• Serve as Incident Commander during major cybersecurity incidents (P1-P2) and as an escalation point for significant operational events.
• Provide executive-level incident coordination and communication during major response activities.
• Ensure effective coordination between technical teams, technology leadership, business stakeholders, legal, compliance, communications, and executive management.
• Review major incident reports, root cause analyses, corrective actions, and lessons-learned activities to improve response capabilities.
• Validate that response activities align with established incident response procedures, regulatory obligations, and organizational expectations.

Strategic Leadership

• Develop and execute regional operational strategies aligned with departmental and enterprise cybersecurity objectives.
• Partner with senior leadership to identify capability gaps, emerging risks, staffing requirements, and investment opportunities.
• Lead strategic projects related to threat detection, incident response, operational maturity, workforce development, and cyber defense capabilities.
• Create and socialize program updates, key accomplishments, operational metrics, and strategic initiatives to stakeholders and leadership.

Risk, Governance, and Compliance

• Ensure compliance with cybersecurity policies, standards, regulatory requirements, and control frameworks.
• Support internal audits, regulatory examinations, tabletop exercises, assessments, and evidence requests.
• Oversee the creation, maintenance, and continuous improvement of operational procedures, playbooks, and response methodologies.
• Leverage threat intelligence, industry trends, operational metrics, and stakeholder feedback to continuously improve cybersecurity capabilities and security posture.

Organizational Advocacy

• Promote cybersecurity awareness and Blue Team capabilities throughout the organization.
• Build and maintain strong partnerships with technology teams, business units, risk management, compliance, and executive leadership.
• Represent CMIR within cross-functional initiatives, governance forums, exercises, and strategic planning discussions.
• Occasionally travel to conferences, training, and other DTCC offices (up to 20%).
• Act as the management escalation contact for on-call activities and emergency response situations.
• Support after-hours incident response activities when required.

• Min 8 years of relevant experience
• Bachelors' Degree and/or equivalent experience

• Have at least seven (7) years of cybersecurity, security operations, incident response, digital forensics, threat hunting, or related experience.
• Have at least three (3) years of leadership experience managing teams, major initiatives, or operational programs.
• Demonstrate success leading high-performing technical teams in a fast-paced operational environment.
• Demonstrate experience conducting performance evaluations, coaching, mentoring, employee development planning, and talent management activities.
• Demonstrate the ability to establish goals, develop action plans, assign responsibilities, measure outcomes, and drive accountability.
• Demonstrate experience managing major cybersecurity incidents involving multiple technical teams, business stakeholders, and executive leadership.
• Demonstrate strong written and verbal communication skills, including the ability to present complex technical concepts to technical and non-technical audiences.
• Demonstrate the ability to independently manage competing priorities and make sound decisions during high-pressure situations.
• Demonstrate emotional intelligence, sound judgment, conflict resolution skills, and strong leadership principles.
• Demonstrate experience using metrics and data to drive operational improvements, workforce planning, and strategic decision-making.
• Demonstrate a strong commitment to operational excellence, continuous improvement, and employee development.

The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

About Us

With over 50 years of experience, DTCC is the premier post-trade market infrastructure for the global financial services industry. From 20 locations around the world, DTCC, through its subsidiaries, automates, centralizes, and standardizes the processing of financial transactions, mitigating risk, increasing transparency, enhancing performance and driving efficiency for thousands of broker/dealers, custodian banks and asset managers. Industry owned and governed, the firm innovates purposefully, simplifying the complexities of clearing, settlement, asset servicing, transaction processing, trade reporting and data services across asset classes, bringing enhanced resilience and soundness to existing financial markets while advancing the digital asset ecosystem. In 2024, DTCC's subsidiaries processed securities transactions valued at U.S. $3.7 quadrillion and its depository subsidiary provided custody and asset servicing for securities issues from over 150 countries and territories valued at U.S. $99 trillion. DTCC's Global Trade Repository service, through locally registered, licensed, or approved trade repositories, processes more than 25 billion messages annually. To learn more, please visit us at www.dtcc.com or connect with us on LinkedIn , X , YouTube , Facebook and Instagram .

DTCC proudly supports Flexible Work Arrangements favoring openness and gives people freedom to do their jobs well, by encouraging diverse opinions and emphasizing teamwork. When you join our team, you'll have an opportunity to make meaningful contributions at a company that is recognized as a thought leader in both the financial services and technology industries. A DTCC career is more than a good way to earn a living. It's the chance to make a difference at a company that's truly one of a kind.

Learn more about Clearance and Settlement by clicking here .