
Sr. Director, Security Operations Leader
- Louisville, KY
- Permanent
- Full-time
- Define and drive Yum!'s global SOC strategy and operational roadmap, ensuring alignment with enterprise risk priorities and business growth objectives.
- Serve as the executive escalation point for cyber threats and security incidents, coordinating C-suite briefings and leading post-incident executive reviews.
- Lead a team of ~30
- Security Operations Oversight
- Own and mature Yum!'s 24/7 global SOC, ensuring rapid threat detection, alert triage, root cause analysis, and containment across cloud, on-prem, and hybrid environments.
- Establish and maintain robust playbooks, automation, and coordination protocols for end-to-end incident response, business continuity, and regulatory readiness.
- Lead internal threat hunting and intelligence fusion efforts, integrating commercial, open-source, and internal telemetry to anticipate and disrupt threats.
- Manage Yum!'s enterprise-wide vulnerability management lifecycle, ensuring timely prioritization, remediation, and risk communication across stakeholder groups.
- Act as the primary conduit between security operations and executive leadership, translating technical threats into actionable business impact analysis.
- Build and maintain collaborative relationships across Digital, Technology, Legal, Brand, and Franchise leadership to embed security operations into Yum!'s culture and decision-making.
- Lead tabletop exercises and executive crisis simulations across brands, functions, and geographies to ensure global preparedness.
- Oversee the performance and evolution of SIEM, SOAR, EDR/XDR, vulnerability scanning, and threat intel platforms.
- Manage strategic MSSP and MDR partnerships; drive vendor accountability and ensure best-in-class SLAs and detection efficacy.
- Define, track, and report on SOC KPIs and KRIs, including MTTD, MTTR, detection coverage, operational maturity, and service delivery effectiveness.
- Bachelor's degree in Computer Science, Information Systems, Engineering, Cybersecurity, Business Administration, or a related technical field is required.
- Master's degree in a related discipline is strongly preferred, particularly in cybersecurity leadership, technology management, or enterprise risk.
- 10+ years of progressive experience in cybersecurity, including at least 5 years in senior leadership roles overseeing global Security Operations Center (SOC), threat detection, incident response, or threat intelligence functions.
- Proven track record of leading high-performing security operations teams, developing SOC strategy, and driving operational readiness across global or franchise-based enterprises.
- Demonstrated ability to manage and respond to complex cybersecurity incidents at scale, providing executive-level visibility and business impact analysis.
- Extensive experience with security platforms and frameworks including SIEM, SOAR, EDR/XDR, MITRE ATT&CK, NIST CSF, and cloud-native security tooling (AWS, Azure, GCP).
- Skilled in managing MSSPs and external threat service providers, driving vendor performance, optimizing cost and efficiency, and ensuring aligned threat coverage.
- Strong ability to translate technical threat data into clear, risk-informed narratives for business stakeholders, including C-suite and board audiences.
- At least one of the following active certifications is required:
- CISSP (Certified Information Systems Security Professional)
- CISM (Certified Information Security Manager)
- CISA (Certified Information Systems Auditor)
- CFE (Certified Fraud Examiner)
- Additional certifications are preferred, including:
- **Technical**: GIAC/GSEC, GCIA, GCIH, OSCP
- **Risk & Governance**: CRISC, CGEIT, CIPP
- **Program & Process Management**: PMP, ITIL
- **Financial/Compliance**: CPA, CA