Senior Manager, Security Services

Panera Bread

. Lead day-to-day Security Operations, including monitoring, proactive threat detection, investigation, incident response, escalation, containment, recovery, and post-incident improvement .

Posted 10/21/2026full-timeSaint Louis • Missouri • United StatesSenior💰 $145,305 - $186,572 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in Security Operations, including incident response, vulnerability management, and compliance with standards such as PCI DSS and SOX. Proven ability to lead cybersecurity teams, manage security platforms, and communicate effectively with stakeholders at all levels.

Highest-signal resume keywords

Incident Response ManagementVulnerability ManagementSecurity Operations LeadershipCompliance and Risk ManagementThreat Intelligence Oversight

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident ResponseVulnerability ManagementThreat AnalysisData Loss PreventionSecurity MonitoringCloud SecurityEndpoint SecurityServer SecurityApplication Security RisksRemediation Practices

Soft Skills

LeadershipAnalytical SkillsOrganizational SkillsStakeholder ManagementCommunication Skills

Tools & Technologies

MDRSOCSecurity PlatformsZero TrustSecure Web GatewayVulnerability ScanningSecurity Workflow Automation

Certifications & Qualifications

CISSPCISMCRISCCISAGIACPCI ISA

Industry Keywords

PCI DSSSOXNIST CSFNIST 800-53CIS ControlsISO 27001SOC 2Risk AssessmentAudit ReadinessCompliance Training

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Lead day-to-day Security Operations, including monitoring, proactive threat detection, investigation, incident response, escalation, containment, recovery, and post-incident improvement
Develop, maintain, and test incident-response runbooks, investigation procedures, escalation workflows, and operational playbooks
Oversee third-party MDR and outsourced SOC providers, monitoring service quality, alert effectiveness, escalation performance, investigation outcomes, and corrective actions
Own and mature the vulnerability and exposure management program, including scanning, risk-based prioritization, remediation coordination, exception management, validation, and reporting
Serve as operational owner and subject matter expert for assigned security platforms and services; define requirements, roadmaps, enhancements, automation, visibility, and utilization
Oversee administration, support, documentation, monitoring, lifecycle management, and performance of assigned security platforms
Lead operational Data Loss Prevention processes, including monitoring, investigation, escalation, exception handling, remediation, and reporting
Oversee threat intelligence and digital-risk-protection activities involving compromised credentials, impersonation, fraudulent domains, dark-web exposure, brand abuse, and active threats
Lead Information Security participation in AI use-case reviews and document safeguards or risk-treatment actions
Provide security consultation, governance, and risk guidance for enterprise projects, technology initiatives, business programs, and vendor implementations
Ensure controls support PCI DSS, SOX-related, audit, contractual, policy, privacy, and other compliance requirements
Coordinate audit and compliance evidence, validate control operation, and drive corrective actions through closure
Develop dashboards and report on incidents, vulnerabilities, threats, DLP activity, remediation, compliance readiness, provider performance, and security posture
Support security awareness campaigns, phishing simulations, security communications, user education, and compliance training
Manage security vendor and service-provider relationships, including service reviews, escalations, licensing, renewals, performance improvement, and lifecycle planning
Lead, coach, and develop security professionals while strengthening documentation, cross-training, accountability, and resilience
Partner with engineering, infrastructure, cloud, network, endpoint, application, architecture, legal, privacy, audit, GRC, procurement, HR, and business stakeholders

Requirements

What you’ll need

Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Computer Science, Risk Management, or a related discipline, or equivalent practical experience
Seven or more years of progressive cybersecurity experience, including substantial responsibility in security operations and demonstrated experience in vulnerability management, risk management, compliance, or related disciplines
At least three years of experience leading cybersecurity teams and programs, including responsibility for staff development, operational priorities, major initiatives, or cross-functional security activities
Demonstrated experience with incident response, vulnerability management, threat analysis, application security risks, endpoint security, server and network security, cloud security, Data Loss Prevention, threat intelligence, security monitoring, remediation practices, and data protection
Experience overseeing MDR, outsourced SOC, managed security services, or comparable third-party cybersecurity providers
Working knowledge of PCI DSS, SOX-related security considerations, privacy and personal-information protection, audit readiness, control validation, risk assessment, remediation tracking, and evidence management
Experience translating regulatory, contractual, policy, and control requirements into sustainable operational security processes
Experience serving as the operational owner of enterprise security platforms and managing security vendor and service provider relationships, including licensing, renewals, and service reviews
Excellent oral and written communication skills, with the ability to communicate security, risk, and compliance matters to executives, end users, technical teams, auditors, and external providers
Strong leadership, judgment, analytical, organizational, and stakeholder-management skills, with the ability to manage competing operational priorities and incidents
Preferred: Experience supporting PCI DSS assessments and Approved Scanning Vendor requirements
Preferred: Experience with AI governance, emerging-technology risk reviews, privacy, or data-protection programs
Preferred: Hands-on experience with Zero Trust, secure web gateway, endpoint protection, vulnerability scanning, and security workflow automation
Preferred: Familiarity with NIST CSF, NIST 800-53, CIS Controls, ISO 27001, SOC 2, and technical security risk-assessment methodologies
Preferred: Experience preparing executive, audit committee, or board-level security reporting
Preferred: Relevant certification such as CISSP, CISM, CRISC, CISA, GIAC, PCI ISA, or an equivalent credential