Security Operations Lead

Kapital Consulting; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

Kapital Consulting is seeking a Cyber Security Operations Lead for a FinTech client in Sydney to own day-to-day security operations and incident response. You’ll bridge internal teams and the managed SOC provider to ensure incidents are handled properly and risks are understood across the security environment.

This is a great step-up for someone already operating within Cyber Operations who wants more ownership, exposure and influence, with leadership responsibilities over a direct report.

Qualifications

• Experience in Cyber Security Operations, SOC or Incident Response.
• Strong understanding of SIEM, EDR, threat detection and incident management.
• Experience working with managed security providers (MSPs).
• Ability to translate technical issues into business risk and communicate with leadership.
• Ability to challenge providers and drive better security outcomes.

Responsibilities

• Own Cyber Security Operations and Incident Response.
• Lead the relationship with the managed SOC / MSP.
• Act as the escalation point for security incidents and emerging threats.
• Identify gaps across monitoring, detection and security controls.
• Support evolving security considerations around AI adoption and usage.
• Improve incident response playbooks and operational processes.
• Provide clear security updates and recommendations to senior leadership.
• Manage and develop one direct report.

Skills

SOC / Cyber Operations

Incident Response

Threat detection

Incident management

Managed security providers

Business risk translation

Leadership

Tools

SIEM

EDR

Threat detection tooling

Job description

We’re looking for a Cyber Security Operations Lead to join one of our FinTech clients in Sydney and take ownership of the day‑day security operations function.

You’ll sit at the centre of the business, acting as the bridge between internal teams and the managed SOC provider, making sure incidents are handled properly, risks are understood and the organisation has the right visibility across its security environment.

This is a great step‑up opportunity for someone already operating within Cyber Operations who wants more ownership, exposure and influence.

What’s a typical day look like?

• Own Cyber Security Operations and Incident Response
• Lead the relationship with the managed SOC / MSP
• Act as the escalation point for security incidents and emerging threats
• Identify gaps across monitoring, detection and security controls
• Support the evolving security considerations around AI adoption and usage
• Improve incident response playbooks and operational processes
• Provide clear security updates and recommendations to senior leadership
• Manage and develop one direct report

About you:

• Strong SOC, Cyber Operations or Incident Response experience
• Good understanding of SIEM, EDR, threat detection and incident management
• Experience working with managed security providers
• Ability to understand technical issues and translate them into business risk
• Confidence challenging providers and driving better security outcomes
• Financial Services, FinTech or another regulated environment highly regarded

This isn’t a role where you’ll simply manage an outsourced SOC. We want someone who understands what good Cyber Operations looks like and has the confidence to make sure it’s happening.