Cyber Operations Lead

The Role

SysGroup is

hiring a Cyber Operations Lead, based in Edinburgh, to head the day-to-day

delivery of our cyber security managed services. This is the senior operational

leadership role in the Cyber Security team under our 2026 operating model: you

own the SOC service, lead the security engineers and analysts, and act as the

escalation point for major security incidents across our client base.

This is a

leadership and delivery role. You will run the operation, develop the people

and own the service - including operational delivery of our Zscaler zero trust

estate.

Requirements

Key Responsibilities

Leadership

·Lead, coach and develop the

cyber operations engineers and analysts - 1:1s, development plans, hiring and

succession.

·Own capacity, shift and on-call

planning for a 24/7 security service.

·Set and track the team's

certification and capability plan against the SysGroup role framework.

·Own operational reporting:

client-facing security reports, KPIs and continual service improvement.

Security operations

·Own SOC/SIEM service delivery:

detection coverage, use-case tuning, triage quality and shift handovers.

·Act as major incident lead for

security events: containment, client communication and post-incident review.

·Own the vulnerability

management lifecycle across managed clients: scan, triage, remediate, report.

·Set the standard for EDR and

security tooling configuration, health and response playbooks.

·Own operational delivery of the

Zscaler zero trust estate (ZIA/ZPA): onboarding, policy lifecycle, tuning and

upgrades.

·Support Risk & Compliance

engagements (ISO 27001, Cyber Essentials Plus) with operational evidence.

·Embed AI-assisted workflows

(triage, enrichment, reporting) into the SOC and measure the gains.

Experience

·5+ years in security operations

within an MSP/MSSP or equivalent multi-client environment.

·3+ years leading engineers or

analysts, including performance and development responsibility.

·Track record running major

security incidents end-to-end, including executive-level communication.

·Operational experience with

Zscaler (or equivalent SSE/zero trust platform) is a strong advantage.

Certifications

·Essential (or equivalent

experience): Microsoft SC-200, plus an incident response credential such as

GIAC GCIH.

·Desirable: Zscaler

professional-level certification (ZIA/ZPA), SC-300, AZ-500, ISO 27001 Lead

Implementer, CISSP or CISM.

Benefits

Why Join Us?

Joining Sysgroup means becoming part of a

dynamic and innovative team that is dedicated to excellence. We offer a

supportive, and collaborative work environment, where your ideas and

contributions are valued. Here are some of the benefits of working with us:

Competitive Compensation

We offer a competitive salary package,

including performance-based incentives, to reward your hard work and

achievements.

-Private Healthcare

-Life insurance

-Healthcare cash plan

-Pension

Growth Opportunities

We believe in investing in our employees'

professional development. You will have

your own individual development learning paths with access to various training

material and ongoing career advancement opportunities.