Manager, Security Operations, Oklahoma City

Job Description

Role: Manager, Security Operations

Location:

United States (Hybrid - Durham, NC)

Department:

Cybersecurity - Security Operations

Reports to:

Senior Director, Security Operations

Role Overview

The

Manager, Security Operations

is responsible for the operational delivery, governance, and assurance of cybersecurity services provided to

government, public sector, and highly regulated Pearson customers

. This role acts as the

primary Security Operations point of accountability

for these clients, ensuring that Pearson meets contractual, regulatory, and assurance obligations while maintaining a strong security posture.

The role combines

SOC leadership, stakeholder management, regulatory alignment, and incident oversight

, working closely with internal SOC teams, GRC, Legal, Product, and Customer teams, as well as external auditors and government stakeholders.

Key Responsibilities

Government&Public Sector Client Management

Act as the

primary Security Operations contact

for government and regulated customers, supporting security assurance discussions, audits, and contractual obligations.

Own the

operational security relationship

with public sector clients, including response to security questionnaires, evidence requests, and assurance reviews.

Ensure SOC services align with

government security expectations

, contractual SLAs, and regulatory requirements (e.g. FedRAMP-adjacent controls, ISO, SOC, regional equivalents where applicable).

Security Operations Oversight

Provide operational leadership across SOC functions supporting government and regulated environments, including:

Monitoring and detection

Incident response coordination

Access governance and periodic reviews

Vulnerability and risk tracking

Ensure

consistent, auditable execution of SOC processes

aligned to approved runbooks and playbooks.

Oversee escalation handling for security events impacting regulated customers, ensuring timely, accurate, and compliant communications.

Incident Response&Regulatory Support

Lead or coordinate

incident response activities

involving government or regulated customers, including:

Triage and containment oversight

Executive and customer communications

Post-incident reporting and lessons learned

Partner with Legal, GRC, and Communications teams to support

regulatory notifications

and customer disclosures where required.

Assurance, Reporting&Evidence Management

Own delivery of

security reporting and evidence

for government clients, including:

Access reviews

Incident summaries

Control effectiveness metrics

Ensure SOC data used for external reporting is

accurate, validated, and defensible

.

Support internal and external audits relevant to government and regulated customers.

Stakeholder&Cross-Functional Leadership

Act as a trusted advisor to:

Government customer stakeholders

Internal Product and Engineering teams

GRC, Legal, and Privacy partners

Translate complex SOC operations into

clear, non-technical risk and assurance narratives

for customers and leadership.

Continuous Improvement&Risk Reduction

Identify systemic risks or control gaps affecting regulated environments and drive remediation through SOC and engineering teams.

Contribute to the evolution of

SOC processes, tooling, and reporting

to better support government and regulated use cases.

Mentor SOC team members on regulatory awareness, evidence quality, and customer-facing security operations.

Skills&Experience

Required

Proven experience in

Security Operations or Incident Response leadership

roles.

Strong understanding of

security controls, monitoring, and incident management

in regulated environments.

Demonstrated experience supporting

government or highly regulated customers

.

Excellent stakeholder management and written communication skills, particularly for audit and customer-facing contexts.

Ability to translate technical security issues into

clear risk-based explanations

for non-technical audiences.

Desirable

Experience supporting audits or frameworks such as

ISO 27001, SOC 2, FedRAMP-aligned environments, or similar

.

Familiarity with SOC tooling (SIEM, EDR, SOAR) and access governance processes.

Prior experience working with Legal, Privacy, or Compliance teams during security incidents.

What Success Looks Like

Government and regulated customers have

high confidence

in Pearson's Security Operations capability.

Security incidents involving regulated clients are

managed professionally, consistently, and compliantly

.

Audit and assurance requests are

handled efficiently with high-quality evidence

.

SOC processes supporting regulated environments are

repeatable, documented, and defensible

.

Applications will be accepted through 5/26/2026. This window may be extended depending on business needs.

Compensation at Pearson is influenced by a wide array of factors including but not limited to skill set, level of experience, and specific location. As required by the California, Colorado, Hawaii, Illinois, Maryland, Minnesota, New Jersey, New York State, New York City, Vermont, Washington State, and Washington DC laws, the pay range for this position is as follows:

The full-time salary range is between $130,000 - $140,000.

This position is eligible to participate in an annual incentive program, and information on benefits offered is here.

#LI-EB1

Who we are:

At Pearson, our purpose is simple: to help people realize the life they imagine through learning. We believe that every learning opportunity is a chance for a personal breakthrough. We are the world's lifelong learning company. For us, learning isn't just what we do. It's who we are. To learn more: We are Pearson.

Pearson is an Equal Opportunity Employer and a member of E-Verify. Employment decisions are based on qualifications, merit and business need. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, sexual orientation, gender identity, gender expression, age, national origin, protected veteran status, disability status or any other group protected by law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.

If you are an individual with a disability and are unable or limited in your ability to use or access our career site as a result of your disability, you may request reasonable accommodations by emailing .

Job:

Security

Job Family:

TECHNOLOGY

Organization:

OCTO

Schedule:

FULL_TIME

Workplace Type:

Hybrid

Req ID:

23711

#location