Scanning Manager Jobs in Illinois (NOW HIRING)

• Health/Rx
• Dental
• Vision
• Flexible and health spending accounts (FSA/HSA)
• Supplemental life insurance
• 401(k)
• Paid time off
• Paid sick time
• Short term & long term disability coverage (STD/LTD)
• Employee stock ownership (ESOP)
• Holiday pay for company designated holidays

At KeHE, we’re obsessed with creating solutions, unboxing potential, and serving others – and it all starts with you. As an employee-owned distributor of natural and organic, specialty, and fresh products, we’re committed to making a positive impact and scaling our success together. With a culture that fosters development and opportunity, you’ll be embarking on a career that’s moving forward. When you join KeHE, you’re becoming part of a team that is a force for good.

The Security Operations Manager is a working manager who both leads and actively contributes to the organization’s information security operations. This role owns day-to-day security operations and detection, builds and operates the vulnerability management function. The role partners closely with internal teams, and external service partners to reduce risk, respond to incidents, mature security processes, and build a scalable program with direct reports, budget input, and tool ownership consolidating under it. As with all positions at KeHE Distributors, we expect that all actions will be consistent with KeHE’s Mission, Vision, and Values.

DUTIES, TASKS AND RESPONSIBILITIES:

Security Operations Support

• Own day-to-day security operations, including alert triage standards, escalation paths, incident response coordination, and the operating rhythm of the internal SOC function.
• Partner with managed security service providers to ensure effective coverage, service quality, and timely response.
• Support the development and maintenance of incident response processes, playbooks, and escalation procedures.
• Help coordinate response and investigation activities with internal teams and external partners as needed.
• Drive detection engineering improvements across SIEM and endpoint tooling, and own operational metrics such as mean time to detect and respond.
• Manage and continuously improve security technologies across the stack, such as endpoint detection and response (EDR/XDR), SIEM, email security, and vulnerability management, and own the co-managed MDR/MSSP partnership.

Vulnerability Detection & Threat Response

• Operate and schedule vulnerability scanning across the environment (infrastructure, endpoint, network, and external/attack-surface), owning scan coverage, cadence, and the health and tuning of the scanning tools.
• Continuously monitor vulnerability and threat detection outputs, validating and triaging new findings for exploitability and exposure.
• Lead time-sensitive threat and vulnerability response: track emerging threats and actively-exploited vulnerabilities (threat intelligence, zero-days), assess the organization's exposure, and coordinate urgent response and containment.
• Partner with Security Engineering and IT teams to align scanning coverage with the asset inventory and close detection gaps.

Program Development & Leadership

• Help develop and mature the broader information security program in partnership with IT Leadership, taking on new focus areas as priorities evolve.
• Recruit, mentor, and develop security staff as the team grows; build repeatable processes so the program is not dependent on any single individual.
• Define operating procedures, escalation paths, and reporting cadences for the functions this role builds.
• Demonstrate Company’s Core Competencies and values held within.

Reporting & Stakeholder Management

• Produce regular security metrics and program updates for leadership reporting.
• Maintain visibility into open risks and remediation progress, escalating blockers as appropriate.
• Represent the security program in cross-functional meetings and collaborate with internal teams and external partners.

Other Responsibilities

• Support GRC activities, including policy maintenance, control tracking, and risk register upkeep.
• Assist audit and certification readiness efforts, contributing to evidence collection and control documentation across stakeholders.
• Support the vendor and third-party risk management process, participating in security posture assessments and helping track findings.
• Contribute to security awareness efforts, helping ensure training and communications reach all parts of the organization.
• Participate in evaluating security practices for emerging AI and agentic tools as adoption expands across the organization.
• Provide input into governance, guardrails, and acceptable-use guidance for new technologies, balancing enablement with risk.
• Stay current on the evolving threat landscape and help the security program adapt as new risks and use cases emerge.
• The position responsibilities outlined above are in no way to be construed as all encompassing. Other duties, responsibilities, and qualifications may be required and/or assigned as necessary.
• Other duties and projects as assigned.

SKILLS, KNOWLEDGE AND ABILITIES:

• Broad understanding of information security domains, including security operations, vulnerability management, governance, risk, and compliance.
• Experience with incident response, including investigation, coordination, and post-incident improvement.
• Working fluency in identity and access management - directory services, conditional access, MFA, and privileged access concepts - sufficient to own IAM run-state issues before a dedicated IAM team exists.
• Demonstrated hands-on capability: able to write or tune a detection, work an incident end to end, and interpret log and endpoint telemetry directly.
• Experience managing managed detection and response or MSSP partnerships, including holding a provider accountable to coverage and service outcomes.
• Experience developing security policies, standards, and risk management processes.
• Familiarity with common security and risk frameworks and control mapping.
• Ability to prioritize work using risk context and business impact.
• Strong written and verbal communication skills; ability to translate security concepts for both technical and non-technical audiences.
• Experience supporting audit or certification programs, preferred
• Experience building vendor or third-party risk management processes, preferred
• Awareness of emerging security risks, including those related to AI and agentic tool adoption, and interest in helping shape AI security practices as the program matures, preferred
• Experience mentoring or managing security staff, preferred
• Player-coach mindset; comfortable performing hands-on work while building processes and leading others.
• Strong collaboration and stakeholder management skills; ability to influence without authority.
• Ability to manage multiple priorities and adapt to shifting organizational needs.
• High integrity and ability to maintain confidentiality of sensitive information.

EDUCATION AND EXPERIENCE:

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or related field; or equivalent practical experience.
• Minimum of 8 years progressive experience in information security, with minimum of 3 years’ experience in a lead or management capacity.
• Demonstrated experience building or maturing security functions, rather than solely operating within established programs.
• Experience in a regulated or multi-entity environment.
• Relevant information security certification (e.g., CISSP, CISM, GCIH, GCIA, or comparable), or equivalent demonstrated experience (or ability to obtain within 12 months).

PHYSICAL REQUIREMENTS:

• This position operates in a hybrid working environment, with in-person presence Tuesday, Wednesday, and Thursday (remote work available Monday and Friday, as business needs allow).
• Ability to work in a standard office environment which requires sitting and viewing monitor(s) for extended periods of time, operating standard office equipment such as, but not limited to, a keyboard, copier and telephone.
• Limited travel as needed to Company locations and third-party locations within the US.

EDUCATION AND EXPERIENCE:

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or related field; or equivalent practical experience.
• Minimum of 8 years progressive experience in information security, with minimum of 3 years’ experience in a lead or management capacity.
• Demonstrated experience building or maturing security functions, rather than solely operating within established programs.
• Experience in a regulated or multi-entity environment.
• Relevant information security certification (e.g., CISSP, CISM, GCIH, GCIA, or comparable), or equivalent demonstrated experience (or ability to obtain within 12 months).

PHYSICAL REQUIREMENTS:

• This position operates in a hybrid working environment, with in-person presence Tuesday, Wednesday, and Thursday (remote work available Monday and Friday, as business needs allow).
• Ability to work in a standard office environment which requires sitting and viewing monitor(s) for extended periods of time, operating standard office equipment such as, but not limited to, a keyboard, copier and telephone.
• Limited travel as needed to Company locations and third-party locations within the US.