Security Operations Centre (SOC) Manager

Job Purpose

The SOC Manager leads the daily operations of the Security Operations Centre, overseeing on-premises and hosted security technologies, directing incident response, and leading the SOC team. The role ensures the continued maturity of the organization's security controls and the protection of its data, infrastructure, and customers against evolving cyber threats.

Job Dimensions

• Reports to: Cybersecurity Manager
• Direct reports: 6
• Indirect reports: 0
• Function: Cybersecurity / Security Operations

Key Accountabilities

SOC Monitoring & Management

• Oversee the daily monitoring and review of security event activity and the cyber-threat landscape, ensuring the ongoing maturity of the organisation's security controls.
• Manage the resolution of cybersecurity incidents and coordinate engineering support for security systems.
• Identify and diagnose potential threats — including root-cause analysis and after-action reviews — to ensure security controls (firewalls, IPS, etc.) defend the enterprise against malicious network attacks.
• Manage customer relationships against SLAs, expectations, and contractual terms.
• Drive the creation and implementation of custom alerting rules, searches, and dashboards for review and investigation.
• Oversee support-ticket analysis to identify and implement improvements, and report findings, data, and KPIs to leadership.
• Own the design and engineering of key security tools, including the automation of tasks and processes through scripting and programming.
• Collaborate with internal teams to embed security, logging, auditing, and support needs across the software development lifecycle.
• Align internal SOC processes to improve analyst efficiency.

Governance

• Implement the NIST Cybersecurity Framework.
• Ensure security teams' adherence to security controls and policies.
• Ensure appropriate segregation of duties and responsibilities.

Reporting & Documentation

• Develop and streamline processes and procedures for efficient SOC operations.
• Conduct weekly and monthly service-review meetings with relevant stakeholders.
• Ensure the organization's data and infrastructure are protected through appropriate security controls.
• Perform routine security audits of the infrastructure and present findings.

Training & Development

• Ensure all certifications required for the role are met within 6 months of joining and kept valid thereafter.
• Maintain knowledge across all relevant areas of security administration and expand specialist knowledge as required.
• Stay current with the field through continuous learning and participation in technical events.

Span of Communication

• Internal: FutureX internal teams
• External: Customers

Qualifications, Experience & Skills

Required Qualifications & Certifications

• Bachelor's degree in a related field
• CISSP – Certified Information Systems Security Professional
• CISM – Certified Information Security Manager
• GPEN – GIAC Penetration Tester
• GREM – GIAC Reverse Engineering Malware
• GCFE – GIAC Certified Forensic Examiner
• ITIL Foundation

(Certifications must be held or obtained within 6 months of joining.)

Required Experience

• 8–12 years of relevant cybersecurity / security operations experience

Required Skills

• Complex problem-solving
• Fluent spoken and written English
• Ability to deliver clear, engaging, and concise presentations to customers

Job-Specific Skills & Competencies

Technical Competencies

• SIEM, DLP, Active Directory, Email Security, Endpoint Security, IDS/IPS, and related tooling
• Vulnerability assessments
• Identity & Access Management principles
• Advanced Persistent Threats (APT)
• Secure coding practices
• Proficiency in Python, C++, Java, Ruby, and/or PowerShell

Other Requirements

• Some travel and possible project work at customers' offices
• Some out-of-hours work