Service Security Manager

UST; Madrid; Remote; EUR 90,000 - 120,000; Full time

Job summary

UST is seeking an experienced Service Security Manager to oversee a portfolio of up to 12 enterprise clients in a remote/hybrid setup in Spain. This role focuses on service governance for a managed SOC service, including SLAs, incident handling, changes, and risk management; it is a governance role, not a SOC analyst position.

You will engage CISOs and IT leadership, coordinate major incidents with clients, SOC and vendors, and drive continual service improvements and roadmap alignment.

Qualifications

• 4+ years in MSSP/SOC in a client-facing role.
• Proven experience in incident, major incident, change, risk and service level management.
• Solid security knowledge: SOC operating models, detection and response, vulnerability management.
• Executive communication: leading steering committees and reporting to CISOs.

Responsibilities

• Major incidents: coordinate communication across client, SOC and vendors; post-incident reports.
• Service governance: run monthly operational and executive service reviews; minutes with actions.
• SLA/KPI management: track SLAs, flag deviations, produce monthly reports and dashboards.
• Service requests: qualify, prioritise and close; route out-of-scope needs as new business opportunities.
• Change management: assess impact on security posture, communicate windows and risks, verify results.
• Risk and action tracking: maintain action log and operational risk register.
• Continual improvement: review client security posture and build the service roadmap.
• Stakeholder management: build trusted relationships with CISOs and IT leadership; client visits.
• Backup: act as backup SSM for peer portfolios

Skills

SOC operations

Incident management

Change management

Stakeholder management

Executive communication

Education

Degree in Computer Science / IT or related field

Tools

SIEM/SOAR

MITRE ATT&CK

Splunk / Sentinel / QRadar

ITIL 4 Foundation

Job description

Role Description

We are looking for the very Top Talent…and we would be delighted if you were to join our team! More in details, UST is a multinational company based in North America, certified as a Top Employer company with over 35.000 employees all over the world and presence in more than 30 countries. We are leaders on digital technology services, and we provide large-scale technologic solutions to big companies.

Role Description

We are looking for the very Top Talent…and we would be delighted if you were to join our team! More in details, UST is a multinational company based in North America, certified as a Top Employer company with over 35.000 employees all over the world and presence in more than 30 countries. We are leaders on digital technology services, and we provide large-scale technologic solutions to big companies.

What are we looking for?

We are looking for an experienced Service Security Manager with 4+ years of experience in managed security services (MSSP/SOC) in a client-facing role. Strong knowledge of SOC operations, incident and change management, SIEM/SOAR, SLAs and security frameworks is essential. The ideal candidate will have excellent stakeholder management skills and the ability to engage confidently with CISOs and IT leadership.

Location

• Remote, Spain.
• Candidates based in Madrid preferred (occasional client visits and in-person reviews)

Schedule

• Monday to Friday, business hours.
• Occasional out-of-hours support for critical incidents

Languages

• English C1
• Spanish native or equivalent

ROLE PURPOSE

• Single point of contact (SPOC) and security advisor for a portfolio of up to 12 enterprise clients, or one dedicated key account
• Owns service governance for a managed SOC service: SLAs, reporting, critical incidents, changes, risks and improvement
• Service management role, not a SOC analyst role: no triage, threat hunting or SIEM administration

Key Responsibilities

• Major incidents: coordinate communication across client, SOC and vendors; deliver post-incident reports (root cause, impact, actions)
• Service governance: run monthly operational and executive service reviews; issue minutes with actions, owners and dates
• SLA/KPI management: track SLAs, flag deviations proactively, produce monthly service reports and dashboards
• Service requests: qualify, prioritise and close; route out-of-scope needs as new business opportunities
• Change management: assess impact on security posture, communicate windows and risks, verify results
• Risk and action tracking: maintain action log and operational risk register
• Continual improvement: review client security posture, propose improvements and build the service roadmap
• Stakeholder management: build trusted relationships with CISOs and IT leadership; regular client visits
• Backup: act as backup SSM for peer portfolios

Requirements

• 4+ years in managed security services (MSSP/SOC) in a client-facing role: Service Delivery Manager, TAM, Security Service Manager or similar
• Proven experience in incident, major incident, change, risk and service level management
• Solid security knowledge: SOC operating models, detection and response, SIEM/SOAR, vulnerability management, network and endpoint security
• Executive communication: leading steering committees and writing executive reports
• Able to diagnose issues in real time and discuss them technically with client CISOs

CERTIFICATIONS

Preferred

• CISM
• CISSP
• ISO/IEC 27001 Lead Auditor or Lead Implementer
• ITIL 4 Foundation or higher

Required After Joining

• Google SecOps certification within 3 months (company-funded)

METHODOLOGIES AND FRAMEWORKS

• ITIL 4 (incident, problem, change, service level, continual improvement)
• MITRE ATT&CK
• ISO/IEC 27001

Nice To Have

• ENS
• NIS2
• DORA

NICE TO HAVE

• Google SecOps (Chronicle/SOAR) or other SIEM/SOAR: Splunk, Microsoft Sentinel, QRadar
• Salesforce (ticketing/CRM)
• Microsoft Teams and SharePoint
• Telco or MSSP background
• experience coordinating other service managers
• Degree in Computer Science, Telecommunications Engineering or similar

Skills

Cybersecurity, MITRE ATT&CK, Managed Security Services, CISSP