Security Operations Centre Manager

Accenture; Ottawa; On-site; CAD 100,000 - 130,000; Full time

Job summary

A leading company is seeking a SOC Manager to oversee operations and enhance security for clients. This role demands extensive experience in cyber security, particularly in managing SOC operations and incident response. The ideal candidate will have strong expertise in Microsoft Sentinel and a proven track record in threat detection and communication. Join a passionate team dedicated to building resilience and improving security operations.

Qualifications

• At least 10 years in information/cyber security focused on monitoring and analysis.
• 3 years managing security operations including SOC and Incident Response.

Responsibilities

• Manage SOC operations for external clients, ensuring defensive resiliency.
• Act as service delivery manager and SME during the service run phase.

Skills

Threat Hunting

Incident Response

Communication

Education

Bachelor in Computer Science

Security Certifications

Tools

Microsoft Sentinel

Microsoft Defender for Endpoint

KQL

Job description

Accenture Security helps organizations prepare, protect, detect, respond to, and recover, at all points of the security lifecycle. We hire the very best security talent and arm them with the coolest tools and latest tech so they can help our clients build resilience as we create integrated, customized turnkey solutions. We blend risk strategy, digital identity, cyber defense, application security and managed service solutions to rethink the entire security lifecycle.

The Accenture Security practice is a unique group of people passionate about Information Security. We are currently looking for a SOC Manager.

Job Summary:

• The primary objective of the SOC Manager is to manage SOC operations for our external clients, in transition of service and/or in the run-phase of the service. This role is responsible to drive the day-to-day SOC operations to defend corporate networks from advanced and targeted attacks by providing threat monitoring and cyber defense services. The SOC Manager will work with the SOC Operations team with a focus on threat identification, incident response, cyber threat intelligence infusion, and mitigations—to ensure defensive resiliency.
• Key Responsibilities:
• Act as service delivery manager and Subject Matter Expert (SME) to the SOC team during the run phase of the service
• Providing subject matter expertise and guidance on Sentinel design, implementation, log sourcing integration, UseCase development and trouble shooting
• Providing subject matter expertise and guidance on incident response management and coordinating efforts across client and Accenture teams
• Managing escalations, managing Daily Operations, resources, incident management and
• Reporting and review of contractual metrics – KPI/SLA
• Implement & support security for client environments including implementation of technological solutions
• Participate in business development activities (including responses to RFP/I/Q)
• Champion continuous service improvement and driveautomation efforts
• Contribute to people-related activities, including development, coaching, recruiting, training, and retention. Foster a culture of learning, continuous improvement

• At least 10 years of experience an information/cyber security role focused on security monitoring and analysis, including management of security operations.
• Deep expertise in Microsoft Sentinel, KQL, and Microsoft Defender for Endpoint.
• Skilled in threat hunting, detection engineering (MITRE ATT&CK), and incident response.
• At least 3 years’ experience managing security operations (e.g., SOC, Incident Response, Vulnerability Management, EDR, Cloud Security, Threat Intelligence) including onshore/offshore teams with a view to enhancing operational efficiency and threat detection.
• Extensive experience of working directly with client stakeholders as a single point of contact, managing escalations and driving remediation initiatives
• Strong communication skills, including client management, root cause analysis, and tabletop exercises.
• Experience managing contractual reporting (weekly, monthly, ad hoc), presenting findings clearly and professionally to the client as needed.
• English is required for this position as this role will be aligned to multi-national teams where English is the common language across our Global Enterprise. Due to the significant high volume of interactions with these English-speaking multi-national teams, which is inherent to this position, it is not possible to reorganize the company's activities to avoid this requirement.

Nice to have skills:

• Bachelor or college degree in Computer Science, Telecommunications or Information Security or equivalent work experience
• Security Certifications eg CISSP or CISM
• Prior experience working for professional services firms strongly preferred