Vice President - Cyber Security

Our Company

As a part of Brookfield’s $416B credit platform, Oaktree is a premier credit manager emphasizing an opportunistic, value-oriented, and risk-controlled approach to investing across credit, equity, and real estate.

Oaktree is committed to cultivating an environment that is collaborative, curious, inclusive and honors diversity of thought. Providing training and career development opportunities and emphasizing strong support for our local communities through philanthropic initiatives are essential to our culture.

Oaktree is wholly owned by Brookfield, a leading global investment firm with more than $1 trillion in assets under management. Brookfield owns and operates high-quality businesses and real assets that provide essential services and form the backbone of the global economy. It invests on behalf of institutions and individuals around the world across infrastructure, renewable power and transition, private equity, real estate, and credit.

For additional information, please visit Oaktree’s website at http://www.oaktreecapital.com/

Oaktree is seeking a hands-on Vice President, Cyber Security, to lead cyber security operations, security engineering, and technical security architecture. Reporting to the Senior Vice President, Technology, this role is a member of the Information Security, Architecture, Engineering & Operations organization and is accountable for day-to-day cyber security execution, technical escalations, and delivery of priorities set by the SVP.

The successful candidate will combine the judgment to lead complex incidents and make sound technical decisions with the depth to investigate issues, challenge designs, and build solutions. This role will lead security engineers and analysts to work closely with technology teams and managed security service providers to implement and operate effective defenses.

Technical Leadership and Delivery

·  Provide day-to-day technical leadership to security engineers and analysts, coordinating priorities and delivery across internal teams, global locations, and service providers.

·  Translate the security roadmap into a prioritized delivery plan with clear owners, milestones, and measurable outcomes. Resolve dependencies and follow issues through to closure.

·  Represent the SVP in technical discussions, project decisions, and escalations as delegated. Communicate risks, options, and recommendations clearly, and escalate material decisions promptly.

·  Coach engineers and analysts, strengthen technical capability, and establish clear accountability for service quality and delivery.

·  Lead technical remediation and control testing for GRC and Internal Audit engagements. Establish rigorous tracking for engineering actions to ensure clear ownership and audit-ready closure evidence

Cyber Security Operations and Incident Response

·  Lead the internal technical response to security incidents, coordinating investigation, containment, eradication, and recovery with technology teams and managed security providers. Keep leadership informed and engage appropriate stakeholders through established escalation procedures.

·  Maintain incident playbooks, escalation paths, and response readiness. Coordinate exercises and post-incident reviews, preserve evidence, and ensure corrective actions are completed.

·  Hold managed SOC, detection and response, and threat hunting providers accountable for coverage, investigation quality, timely escalation, and service performance.

·  Improve detection use cases, telemetry, alert tuning, and threat hunting using threat intelligence and attacker behaviors. Validate coverage across endpoints, email, enterprise applications, and collaboration platforms.

Security Engineering and Automation
·  Lead the implementation and improvement of security technologies, including SIEM, EDR/XDR, email security, and data protection controls. Work with Endpoint Engineering on tool integration and hardening and verify configurations and integrations through testing.

·  Build and guide automation using APIs, scripting, and orchestration to improve detection, investigation, response, and control validation, with appropriate testing and change management.

·  Establish operational ownership, platform health monitoring, runbooks, and support processes. Reduce control gaps, unnecessary complexity, and recurring manual work.

·  Lead technical security design reviews and threat modeling for applications, system integrations, and security technologies. Translate findings into practical design requirements and engineering changes.

·  Develop reusable security patterns and technical standards with Enterprise Architecture and engineering teams, emphasizing secure configurations, defense in depth, and operational resilience.

·  Validate security designs through technical testing and confirm that new capabilities integrate with detection, investigation, and response processes before production rollout.

Vulnerability and Exposure Management

·  Lead the vulnerability and exposure management lifecycle, prioritizing remediation using exploitability, asset criticality, business impact, and attack paths.

·  Coordinate penetration tests and adversary simulations, convert findings into assigned remediation plans, and validate that fixes and compensating controls are effective.

·  Measure detection and response performance, security platform health, coverage gaps, and remediation progress. Use the results to prioritize technical improvements and provide concise updates to the SVP.

Data Protection and Application Security

·  Engineer and tune data protection controls, including sensitivity label enforcement, DLP detections, and investigation workflows, in coordination with data owners.

·  Partner with application development teams on secure design, code and dependency scanning, and remediation. Work with the AI Technology & Security leads to review access, data flows, and agent permissions for enterprise AI adoption. Use approved AI tools to improve security workflows, with appropriate validation.

Qualifications

·  10 or more years of progressive cyber security experience, including substantial hands-on security engineering or architecture work and at least 3 years leading technical teams. Demonstrated ability to set priorities, coach engineers and analysts, and deliver security improvements.

·  Demonstrated ability to lead security operations and incident response, make sound containment decisions, and coordinate internal teams and managed service providers under pressure.

·  Strong hands-on experience with enterprise security platforms (SIEM/SOAR, EDR/XDR, email security, and data protection) and strong knowledge of Microsoft 365 and Windows environments, including endpoint protection and security logging. Ability to investigate telemetry, inspect configurations, and troubleshoot complex issues.

·  Experience reviewing technical architecture, conducting threat modeling, and designing security controls for endpoints, applications, data, and security platforms.

·  Ability to write and review automation in PowerShell, Python, or a comparable language and integrate security tools through APIs.

·  Experience driving vulnerability remediation and validating technical controls, with working knowledge of CIS Controls, MITRE ATT&CK, and secure configuration baselines. Strong written and verbal communication and execution skills to explain technical risks to leadership, collaborate with GRC and Internal Audit, and drive engineering actions to completion.

Preferred Qualifications

·  Experience in investment management, financial services, or another regulated enterprise with a high level of service to business users.

·  Experience with platforms such as Microsoft Defender, Microsoft Purview, CrowdStrike Falcon, Splunk or Microsoft Sentinel, and with managed SOC or MDR operating models.

·  Exposure to secure development practices and enterprise AI security, including connectors, agents, data access, and human oversight.

·  CISSP, GCIH, GCIA, or comparable security certifications.

Personal Attributes

·  Leads by doing and earns credibility through technical depth, sound judgment, and consistent follow-through.

·  Takes ownership, anticipates problems, and demonstrates initiative forward independently while keeping leadership informed.

·  Balances security with business needs and user experience, offering workable solutions and responsive service.

·  Builds trust across teams, develops others, and remains calm and decisive under pressure. Exercises discretion and high integrity with sensitive information.

Education

Bachelor’s degree in Computer Science, Computer Engineering, Information Technology, Cyber Security, or a related field required.

Base Salary

$170,000 - $200,000

In addition to a competitive base salary, you will be eligible to receive discretionary bonus incentives, a comprehensive benefits package and a flexible work arrangement.  The base salary offered will be commensurate with experience and/or qualifications, industry knowledge and expertise, as well as prior training and education.

Equal Opportunity Employment Policy

Oaktree is committed to diversity and to equal opportunity employment. Oaktree does not make employment decisions on the basis of race, creed, color, ethnicity, national origin, citizenship, religion, sex, sexual orientation, gender identity, gender expression, age, past or present physical or mental disability, HIV status, medical condition as defined by state law (genetic characteristics or cancer), pregnancy, childbirth and related medical conditions, veteran status, military service, marital status, familial status, genetic information, domestic violence victim status or any other classification protected by applicable federal, state and local laws and ordinances. This policy applies to hiring, placement, internal promotions, training, opportunities for advancement, recruitment advertising, transfers, demotions, layoffs, terminations, recruitment advertising, rates of pay and other forms of compensation and all other terms, conditions and privileges of employment. This policy applies to all Oaktree applicants, employees, clients, and contractors. Staff members wishing to report violations or suspected violations of this policy should contact the head of their department or Human Resources.

For positions based in Los Angeles

For those applying for a position in the city of Los Angeles, the firm will consider for employment qualified applicants with a criminal history in a manner consistent with applicable federal, state and local law.