Global Security Operations Manager

Interface Agency Australia; Sydney; Hybrid; AUD 180,000 - 280,000; Full time

Job summary

Interface Agency Australia partners with a global insurance and financial services organisation to recruit a GSOC Manager to lead the Global Security Operations Center team and drive incident response initiatives.

The role combines technical leadership with hands-on delivery, guiding enterprise-wide investigations and mentoring analysts in a dynamic security environment.

Qualifications

• Proven experience leading or mentoring a Security Operations Center or Incident Response team while remaining hands on.
• Recent hands-on incident response experience (within the last 5 years) across security tools and platforms.
• Certifications in Microsoft security products, ServiceNow or related highly regarded.
• Strong problem-solving skills under pressure to investigate, respond and resolve incidents.
• Deep understanding of modern cyber threats, attack techniques, and defensive strategies.
• Technical expertise in log analysis (network, Active Directory, DNS, firewalls, proxies, cloud).
• Excellent communication with senior stakeholders and executives.
• Leadership qualities to build credibility and coach others in critical situations.
• Experience in a complex global cross-functional team with follow-the-sun operations.

Responsibilities

• Lead, coach and develop a small Global Security Operations team, remaining hands on with investigations.
• Own and coordinate enterprise-wide cybersecurity incident investigations and threat mitigation.
• Set technical direction on security alert monitoring, triage, and root-cause analysis.
• Act as escalation point for high-severity incidents.
• Communicate incidents clearly to technical teams and senior stakeholders, including the CISO.
• Build and mature incident response frameworks using NIST and MITRE ATT&CK.
• Collect and analyse incident data to identify vulnerabilities and remediation steps.
• Collaborate with threat intelligence to improve proactive defence and incident management.

Skills

Hands-on incident response

SOC leadership

Stakeholder communication

Threat hunting

Security tools & platforms

Leadership & mentoring

Cross-functional collaboration

Global/Follow-the-sun operations

Tools

Microsoft security products

ServiceNow

Job description

• Hybrid role, flexible working available, office located in Sydney
• Lead a high performing Global Security Operations team, staying hands on with the tools and tech
• Opportunity to step up and take your career to the next level!

The Opportunity

We are partnering with a global insurance and financial services organisation seeking a GSOC Manager to lead their Global Security Operations Center team.

This role is perfect for an experienced incident response leader who wants to combine technical leadership with hands on delivery. You'll set the direction for enterprise-wide incident response, lead and mentor a small team of analysts, and remain close to the tools and technology rather than stepping back into a purely strategic function.

Importantly, you will also be the go-to for senior stakeholders within the business, providing advice and solutions and acting as the SME for all things Incident Response.

The Role

• Lead, coach and develop a small Global Security Operations team, including analysts and a threat hunter, while remaining hands on with technical investigations yourself
• Own and coordinate enterprise-wide cybersecurity incident investigations, ensuring effective threat mitigation
• Set technical direction on security alert monitoring and analysis, guiding the team through triage, root cause investigation and resolution
• Act as the key escalation point for complex or high severity incidents
• Communicate cybersecurity incidents clearly to technical teams and senior stakeholders, including the CISO, ensuring a structured response approach
• Build and mature incident response frameworks by leveraging industry best practices (NIST, MITRE ATT&CK)
• Collect and analyse incident data to identify vulnerabilities and implement remediation strategies
• Work closely with threat intelligence teams to lift proactive defence measures and incident management capability across the function
• Establish credibility quickly with the team and stakeholders, building trust through hands on capability as much as leadership

About You

• Proven experience leading or mentoring a Security Operations Center or Incident Response team, while remaining hands on and close to the tools and tech, not removed from technical execution
• Recent, hands on incident response experience (within the last 5 years), across a broad range of security tools and platforms.
• Certifications in Microsoft security products, ServiceNow or related highly regarded
• Strong problem-solving skills with the ability to investigate, respond to, and resolve security incidents in high-pressure environments
• Deep understanding of modern cyber threats, attack techniques, and defensive strategies
• Technical expertise in log analysis (network, Active Directory, DNS, firewalls, proxies, cloud technologies)
• Excellent communication skills, with proven experience managing senior stakeholders and engaging both technical teams and executives
• Leadership qualities, capable of building team credibility fast, coaching and developing others, and acting as a trusted advisor in critical situations
• Experience working in a complex, cross-functional, global team environment, ideally with exposure to follow-the-sun operations and financial services

This is an exciting opportunity to lead a high performing team in a cutting-edge cybersecurity environment where you can make a real impact, without giving up the technical work you enjoy.