Cyber Security Operations Lead (SOC & OT)

Snowy Hydro; Cooma; Hybrid; AUD 180,000 - 240,000; Full time

Job summary

Snowy Hydro seeks an experienced Cyber Security Operations Manager to lead daily SOC activities across IT and OT. You will direct incident response, optimize detection and automation, and report security metrics to senior leadership.

The role includes coordinating with risk, resilience, and MDR vendors, while mentoring a small security team in a flexible hybrid setup based in Melbourne. You will drive capability uplift, oversee tabletop exercises, and deliver concise, strategic updates to

Qualifications

• Proven leadership running an enterprise SOC or IR team.
• Experience coordinating cyber incident responses and executive briefings.
• Strong background across IT and OT security operations.

Responsibilities

• Manage daily SOC monitoring, detection platforms, and incident triage across IT/OT.
• Act as Incident Manager during major cyber incidents with containment, briefings, and root-cause analysis.
• Drive automation and detection logic improvements with SOAR and threat intel integration.
• Lead BCP/DR tabletop exercises with Risk and Governance teams.
• Oversee MDR/MSSP vendor performance and operational handoffs.
• Provide coaching and mentorship to a 4–5 person security team.
• Prepare clear, strategic briefs and reports for senior management and board.

Skills

Cyber security leadership

SOC operations

Incident response

Detection & SOAR

Executive communication

Vendor management

Team mentorship

BCP/DR planning

Risk awareness

Education

CISSP

CISM

GIAC

Cyber Security degree

Tools

SIEM

EDR/XDR

SOAR

Threat intelligence

Job description

Snowy Hydro seeks an experienced Cyber Security Operations Manager to lead daily SOC activities across IT and OT. You will direct incident response, optimize detection and automation, and report security metrics to senior leadership.

The role includes coordinating with risk, resilience, and MDR vendors, while mentoring a small security team in a flexible hybrid setup based in Melbourne. You will drive capability uplift, oversee tabletop exercises, and deliver concise, strategic updates to