Overview:
Job Purpose
At StoneX, Threat Management is more than monitoring alerts and responding to incidents—it’s about building the capabilities, teams, and intelligence that allow the business to operate confidently in an evolving threat landscape. As the Director of Threat Management, you’ll lead the strategy and execution behind our global Threat Management organization, including the Security Operations Center (SOC), Threat Detection & Applied Intelligence (TDAI), Exposure Management (Vulnerability Management and Threat Intelligence), and Insider Risk.
Your mission is to shape the future of how StoneX detects, responds to, and reduces cyber risk at scale. You’ll lead through transformation—modernizing operations, driving AI and automation adoption, strengthening detection and response capabilities, and developing resilient teams that can adapt to rapidly changing threats.
This isn’t a role for managing alerts or operating tools directly—it’s a role for leading people, setting vision, and driving operational maturity through empowered teams and leaders. You’ll partner with technology, infrastructure, legal, HR, compliance, and business leadership to ensure Threat Management remains aligned to business priorities while enabling the organization to move quickly and securely.
On Day 1, you’ll step into leadership of an experienced and globally distributed Threat Management organization. Your priority will be to listen and learn—understanding the people, operational rhythms, team dynamics, current capabilities, and areas of opportunity across SOC operations, detection engineering, exposure management, and insider risk. You’ll spend time building trust with managers, technical leaders, and key stakeholders while assessing the current state of operations, tooling, processes, and strategic priorities. Success in this role starts with partnership, thoughtful leadership, and clarity of direction—not sweeping change for the sake of change.
Responsibilities:
As the Director of Threat Management, responsibilities include:
-
Strategic Leadership: Define and execute the long-term Threat Management strategy and roadmap aligned to enterprise risk priorities, evolving threats, and business objectives.
-
Operational Excellence: Lead and mature global Threat Management operations, including SOC, incident response, detection engineering, exposure management, insider risk, and threat intelligence capabilities.
-
Transformation & Innovation: Drive modernization initiatives focused on AI, automation, detection engineering, threat hunting, and scalable security operations.
-
Culture: Foster a culture of collaboration, accountability, inclusion, innovation, and continuous learning across global teams.
-
Building Leaders: Develop managers and technical leaders into strong, empowered leaders capable of building high-performing global teams.
-
Driving Outcomes: Establish measurable operational goals, maturity metrics, KRIs, and KCIs while ensuring accountability and continuous improvement across teams.
-
Executive Partnership: Serve as a trusted advisor to executives and business leaders by translating cyber risk into meaningful business impact and operational readiness insights.
-
Financial Stewardship: Support budget planning, vendor strategy, and investment prioritization to ensure Threat Management capabilities scale effectively and sustainably.
As the Director of Threat Management, a typical week might include the following:
-
Spending at least four days in the office engaging directly with leaders, analysts, engineers, and stakeholders to drive alignment and operational momentum.
-
Meeting with managers and technical leaders to review incidents, operational performance, staffing needs, roadmap progress, and strategic initiatives.
-
Partnering with infrastructure, engineering, legal, HR, compliance, and business leadership to coordinate priorities and improve enterprise-wide security readiness.
-
Reviewing major incidents, emerging threats, geopolitical risks, and operational trends while helping teams navigate high-pressure situations effectively.
-
Coaching leaders in communication, decision-making, operational maturity, and team development strategies.
-
Driving discussions around automation, AI capabilities, threat detection improvements, and long-term operational transformation initiatives.
-
Participating in executive and cross-functional meetings to communicate risk, operational readiness, and Threat Management priorities.
-
Reviewing vendor strategy, technology investments, staffing models, and budget priorities to ensure alignment with long-term operational goals.
This job might be for you if:
-
You’re culture-driven – you believe strong security teams are built through inclusion, mentorship, accountability, and continuous learning.
-
You’re collaborative – you know the best security outcomes come from strong partnerships across business and technology teams.
-
You’re calm under pressure – during incidents or crisis situations, people look to you for clarity, direction, and steady leadership.
-
You’re approachable – whether working with analysts, engineers, executives, or business stakeholders, people trust your authenticity and communication style.
-
You’re operationally minded – you thrive in fast-moving environments and can balance strategic thinking with strong operational execution.
-
You’re a leader of leaders – you enjoy building managers and technical leaders into confident, capable leaders who empower their teams to succeed.
-
You’re transformation-focused – you’re energized by modernizing security operations through AI, automation, and scalable processes.
-
You’re strategically curious – you think beyond today’s threats and focus on how to evolve organizations for the future.
Qualifications:
To land this role:
Required qualifications:
-
12+ years of experience across cybersecurity and related enterprise technology domains.
-
7+ years of experience leading global security operations, Threat Management, or related security functions.
-
Demonstrated leadership experience across one or more of the following areas: SOC operations, incident response, detection engineering, threat intelligence, exposure management, insider risk, or security automation.
-
Experience leading operational transformation initiatives focused on modernization, scalability, automation, or AI adoption.
-
Strong understanding of cloud security, endpoint security, identity security, networking, and enterprise infrastructure environments.
-
Experience managing high-pressure operational environments, crisis response, and enterprise-wide incident coordination.
-
Proven ability to influence executives, communicate risk effectively, and lead cross-functional initiatives.
-
Experience building strategic roadmaps, operational maturity programs, and measurable performance outcomes.
-
Experience leading and developing geographically distributed teams.
Preferred qualifications:
-
Bachelor's or master's degree in information security, Computer Science, Engineering, or related fields. Equivalent experience and non-traditional paths are welcomed.
-
Industry certifications such as CISSP, CISM, GIAC, GCIA, GCIH, or related security certifications.
-
Experience within highly regulated industries and/or financial services environments.
-
Experience implementing AI-driven security operations or advanced automation capabilities within Threat Management programs.
-
Experience representing organizations externally through industry engagement, conferences, or thought leadership initiatives.
