Security Operations Manager

Job Objective: The Security Operations Manager is responsible for the day-to-day running of the Security Operations Centre (SOC) and for the security tools on which the organisation relies. You will lead a high-performing team, strengthen our security posture and ensure that threats are detected, contained and resolved quickly.

Reporting Line: Director of Cybersecurity

Key Duties and Responsibilities

• Lead SOC operations, including people, shifts, priorities and managed security service providers (MSSPs)
• Own organisation-wide security hardening and vulnerability management, including baselines, compliance tracking and remediation
• Own all security tools, including but not limited to firewalls, Zero Trust Network Access (ZTNA) solutions, Endpoint Detection and Response (EDR), Network Detection and Response (NDR), vulnerability management, Security Information and Event Management (SIEM), Security Orchestration, Automation and Response (SOAR), email security and security awareness
• Coordinate the response to incidents, vulnerabilities and zero-day threats through to closure
• Maintain SOC, incident response and disaster recovery playbooks
• Report on SOC performance, risks and key performance indicators (KPIs) to the Director, Cybersecurity
• Own operational evidence for ISO 27001 and audit requirements
• Step in hands-on across SOC analysis, security tool administration and architecture tasks when needed
• Provide cover for other Cybersecurity roles as required, including SOC monitoring, incident response, vulnerability management, EDR, architecture and security tools
• Perform other related duties as required by the Director, Cybersecurity
• This role operates within a 24x7 SOC. The successful candidate must be available to work rotational shifts, including nights, weekends and public holidays, and be flexible to adapt to future changes in shift patterns and operating hours as business needs evolve

Minimum Qualifications

• Bachelor’s degree in Computer Science, Information Technology or a related field
• Relevant technical certifications, such as CCNA or Microsoft SC-200 (Security Operations Analyst - SIEM/SOAR and XDR), or GIAC certifications, such as GSOM (Security Operations Manager), GCIH, GSOC, GCDA, GMON, GCIA or GCFA.
• CompTIA CySA+, Rapid7 InsightVM or CrowdStrike (CCFR/CCFA) certifications are a plus.

Experience and Skills

• 7+ years’ experience in a dedicated cybersecurity role, including at least 2+ years leading a SOC or security operations team.
• Hands-on technical background as a SOC analyst, incident responder or security engineer.
• Expert knowledge of EDR, SIEM/SOAR (e.g. Microsoft Sentinel), vulnerability management and hardening tools, with the ability to configure, tune and troubleshoot them.
• Strong understanding of firewalls, networking, Microsoft 365, Azure and endpoint security.
• In-depth knowledge of incident response, adversary techniques (MITRE ATT&CK) and risk management frameworks (e.g. NIST).
• Experience managing MSSPs against service level agreements (SLAs).
• Demonstrated ability to manage multiple priorities and solve problems in a fast-paced environment.
• Broad working knowledge across SOC operations, incident response, vulnerability management, EDR, SIEM and security tools.

WIOCC Values

• Integrity - We uphold transparency and honesty in all our interactions.
• Collaboration - We believe in the power of teamwork and shared success.
• Client Focus - Our clients’ needs drive every decision we make.
• Innovation - We constantly seek new approaches and creative solutions.
• Personal Excellence - We strive for the highest standards in everything we do.

Diversity & Inclusion

We are passionate about building an inclusive workplace that celebrates individuality and diversity. All qualified applicants will receive equal consideration regardless of background, identity, or ability.