Job Purpose
The SOC Manager leads the daily operations of the Security Operations Centre, overseeing on-premises and hosted security technologies, directing incident response, and leading the SOC team. The role ensures the continued maturity of the organization's security controls and the protection of its data, infrastructure, and customers against evolving cyber threats.
Job Dimensions Reports to: Cybersecurity Manager Direct reports: 6 Indirect reports: 0 Function: Cybersecurity / Security Operations
Key Accountabilities
SOC Monitoring & Management Oversee the daily monitoring and review of security event activity and the cyber-threat landscape, ensuring the ongoing maturity of the organisation's security controls. Manage the resolution of cybersecurity incidents and coordinate engineering support for security systems. Identify and diagnose potential threats — including root-cause analysis and after-action reviews — to ensure security controls (firewalls, IPS, etc.) defend the enterprise against malicious network attacks. Manage customer relationships against SLAs, expectations, and contractual terms. Drive the creation and implementation of custom alerting rules, searches, and dashboards for review and investigation. Oversee support-ticket analysis to identify and implement improvements, and report findings, data, and KPIs to leadership. Own the design and engineering of key security tools, including the automation of tasks and processes through scripting and programming. Collaborate with internal teams to embed security, logging, auditing, and support needs across the software development lifecycle. Align internal SOC processes to improve analyst efficiency.
Governance Implement the NIST Cybersecurity Framework. Ensure security teams' adherence to security controls and policies. Ensure appropriate segregation of duties and responsibilities.
Reporting & Documentation Develop and streamline processes and procedures for efficient SOC operations. Conduct weekly and monthly service-review meetings with relevant stakeholders. Ensure the organization's data and infrastructure are protected through appropriate security controls. Perform routine security audits of the infrastructure and present findings.
Training & Development Ensure all certifications required for the role are met within 6 months of joining and kept valid thereafter. Maintain knowledge across all relevant areas of security administration and expand specialist knowledge as required. Stay current with the field through continuous learning and participation in technical events.
Span of Communication Internal: Future X internal teams External: Customers
Qualifications, Experience & Skills
Required Qualifications & Certifications Bachelor's degree in a related field CISSP – Certified Information Systems Security Professional CISM – Certified Information Security Manager GPEN – GIAC Penetration Tester GREM – GIAC Reverse Engineering Malware GCFE – GIAC Certified Forensic Examiner ITIL Foundation
(Certifications must be held or obtained within 6 months of joining.)
Required Experience 8–12 years of relevant cybersecurity / security operations experience
Required Skills Complex problem-solving Fluent spoken and written English Ability to deliver clear, engaging, and concise presentations to customers
Job-Specific Skills & Competencies
Technical Competencies SIEM, DLP, Active Directory, Email Security, Endpoint Security, IDS/IPS, and related tooling Vulnerability assessments Identity & Access Management principles Advanced Persistent Threats (APT) Secure coding practices Proficiency in Python, C++, Java, Ruby, and/or Power Shell
Other Requirements Some travel and possible project work at customers' offices Some out-of-hours work
This listing is sourced from a third-party job board. Applying will redirect you to the original posting.