Mgr, Cyber Security Engineering & Ops

BOK Financials cybersecurity team is at the core of the organizations digital defense ensuring the confidentiality integrity and availability of sensitive financial and personal data. With deep expertise across security engineering cloud security identity and access management threat detection vulnerability management incident response and operational resilience the team safeguards the banks technology ecosystem spanning internal cloud SaaS application data and business-to-business environments. Their work supports secure digital operations and drives innovation enabling BOK Financial to deliver seamless and protected banking experiences.

The Manager Cyber Security Engineering and Operations leads the engineering availability resilience and operational effectiveness of enterprise cybersecurity platforms and controls across internal cloud SaaS application data and business-to-business environments. This role translates enterprise risk strategy into sustainable technical capabilities directs complex security initiatives influences cybersecurity architecture and investment priorities and provides leadership during cybersecurity incidents and other events presenting material operational financial regulatory or reputational risk. As a leader within the cybersecurity organization this position is responsible for managing security engineering and operational teams ensuring effective delivery and support of security technologies driving continuous improvement of cybersecurity capabilities and maintaining the reliability resilience and recovery readiness of critical security systems.

We lead with a deep commitment to cybersecurity because protecting sensitive financial and personal data is essential to earning and maintaining trust. Security is more than a responsibility it is a mindset woven into every decision driven by collaboration innovation operational excellence and continuous learning. Our focus is on empowering individuals to grow while making a meaningful impact on the safety resilience and security of our digital environment. Leadership is dedicated to developing high-performing teams fostering accountability supporting career growth and helping employees unlock their potential while delivering critical business outcomes.

You will lead the evaluation deployment integration lifecycle management resilience and operational performance of enterprise cybersecurity technologies and services.
You will manage cybersecurity initiatives balancing scope resources budgets dependencies risks and delivery commitments to ensure successful outcomes.
You will direct cybersecurity engineering and operations activities during security incidents including triage containment remediation recovery escalation and post-incident improvements.
You will partner with cybersecurity architects and technology leaders to implement effective detection prevention and resilience capabilities across the enterprise.
You will evaluate emerging technologies including AI Generative AI and agentic AI security controls risks and governance considerations.
You will collaborate with Audit Compliance Enterprise Risk Management Legal and business stakeholders to support examinations sustain controls address findings and monitor remediation activities.
You will oversee cybersecurity operations tools vendors managed security service providers budgets service roadmaps and issue resolution efforts.
You will lead workforce planning hiring performance management succession planning mentoring coaching and development of a high-performing cybersecurity team.

Bachelors degree in Information Security Computer Science Information Systems Engineering or related field; or equivalent combination of education and experience
10 years of progressively responsible cybersecurity information security security engineering technology risk or security operations experience in complex enterprise environments
5 years of leadership experience managing cybersecurity engineers analysts contractors operational security teams or cross-functional delivery teams
CISSP CISM GIAC CCSP CISA CRISC Security Microsoft Azure Security Engineer Associate AWS Security Specialty or related certification preferred
Demonstrated experience implementing operating and supporting enterprise cybersecurity technologies and day-to-day security operations
Experience supporting audits regulatory examinations compliance reviews and remediation activities in highly regulated financial services environments preferred
Strong knowledge of banking systems operational resilience and cybersecurity risk management
Familiarity with regulatory and compliance requirements including OCC FDIC Federal Reserve SEC FINRA GLBA FFIEC SOX PCI DSS and applicable regulatory notification obligations
Working knowledge of the NIST Cybersecurity Framework NIST SP 800-series guidance CIS Controls and FFIEC cybersecurity domains
Ability to translate technology risk requirements and business objectives into effective technical security controls standards metrics and performance reporting
Ability to align cybersecurity priorities and initiatives with business objectives and enterprise risk management strategies
Expertise leading complex cross-functional projects managing stakeholders and delivering large-scale cybersecurity initiatives

Skills & Knowledge
Expert knowledge of security architecture principles engineering standards governance models and operational security practices
Expertise across network endpoint identity application data cloud and hybrid security technologies
Hands-on knowledge of firewalls web application firewalls IDS/IPS secure web gateways EDR/XDR SIEM SOAR PAM MFA IGA encryption vulnerability management threat monitoring incident response and operational recovery
Experience securing Azure AWS SaaS and hybrid-cloud environments including cloud security posture management and cloud-native security controls
Understanding of AI Generative AI and agentic AI risks governance machine identities non-human identities and secure AI implementation practices
Expertise in risk-based vulnerability and exposure management including prioritization remediation governance exception management and validation of risk reduction
Strong analytical critical-thinking and systems-thinking capabilities with the ability to assess complex technical operational regulatory and business challenges
Executive-level verbal and written communication skills with the ability to communicate complex cybersecurity concepts to technical and non-technical audiences
Proven ability to build lead and develop high-performing teams while driving accountability performance and results