Cyber Security Operations Manager

DataVita; Blantyre; On-site; GBP 100,000 - 140,000; Full time

Benefits offered by this job

33 days annual leave

Life assurance 4x salary

Group income protection 70% of salary

Help@Hand: remote GP, physiotherapy, 1

Cycle to Work scheme

EV car salary sacrifice

Job summary

DataVita Limited is seeking a Senior Cyber Security Operations Manager to own and enhance the company’s real‑world security posture across cloud, infrastructure, and critical facilities. You will coordinate with compliance, platform, and leadership teams to ensure controls work in practice and incidents are managed effectively.

You will drive continuous improvement, turning policies into live operations and leveraging AI to strengthen detection, triage and assurance while balancing business

Qualifications

• Significant hands-on experience in cyber security and security operations.

Responsibilities

• Own DataVita’s day-to-day security posture across cloud, infrastructure, managed services, customer environments and critical facilities.
• Lead the response to security incidents with proportionate actions from immediate intervention to containment and root-cause fixes.
• Identify vulnerabilities, prioritise fixes with technical teams, and see them through to resolution.
• Ensure access control, endpoint security, hardening, patching, logging and monitoring operate effectively in practice.
• Translate policies, frameworks and audit requirements into live controls and routines.
• Regularly verify security controls are working and assign owners with action plans.
• Assess and manage third‑party supplier and service security risks.
• Leverage AI to improve detection, triage, investigation and assurance in security workflows.

Skills

Cyber security

Security operations

Incident response

Vulnerability management

Access control

Endpoint security

Logging and monitoring

AI in security

Security certifications

Managed services / MSP

Tools

SIEM

EDR

Vulnerability management tooling

Microsoft 365 security

IAM

Network security controls

ITSM platforms

Job description

High Blantyre, Scotland G72, United Kingdom

Full-time Permanent Senior

Cyber Security Operations Manager

Location:Hamilton International Technology Park

Reports to:Chief Technology Officer

About DataVita

DataVita is a next-generation cloud and infrastructure company operating from Tier III-certified data centres in Scotland. We work at the bleeding edge of AI adoption, automation, and how these technologies can be integrated into complex legacy environments to deliver genuine transformation.

Most of our customers do not come to us for a single product. They come to us because they have a range of problems across cloud, infrastructure, security, and operations that need solving together. Yes, we deliver managed cloud, backup, disaster recovery, and colocation.

We are also leading the development of the Lanarkshire AI Growth Zone (AIGZ), delivering up to 500MW of AI-ready data centre capacity powered by private-wire renewable energy.

DataVita is the fastest growing technology company in Scotland, with plans to deploy and invest over £2 billion in the coming years. You would be joining at a relatively early stage of that trajectory.

Working at DataVita

DataVita is growing quickly, and this is an opportunity to help shape how security develops within a business undergoing significant transformation.

We value people who are naturally curious about technology, take the initiative to solve problems, and are comfortable challenging established ways of working when there is a better approach.

You should enjoy working in an environment where priorities can evolve, not every answer is immediately obvious, and people are expected to take ownership rather than wait for direction.

We are looking for someone who wants to help build and improve something, takes personal responsibility for outcomes, cares about the customer experience, and is motivated to keep learning as technology evolves

About the Role

Reporting to the Chief Technology Officer, you will own and improve DataVita’s real-world security posture. This role is about making things more secure, not writing reports about why they need to be.

You will work across compliance, platform, infrastructure, service, and leadership teams to make sure security controls are actually working in practice. That means getting into the detail of incidents, vulnerabilities, access, logging, monitoring, hardening, supplier risk, and assurance, then driving issues through to a real outcome. You will turn policies, frameworks, customer commitments, and audit requirements into controls and routines that hold up in a live environment.

You will bring the judgment to tell a theoretical issue from a real weakness or an emergency. You will respond in proportion: sometimes with decisive intervention, sometimes with containment, close monitoring, and a root-cause fix that avoids unnecessary disruption. You’ll have the technical depth to earn credibility with engineers and the judgment to work well with compliance, audit, and business stakeholders. You will be comfortable challenging weak practice and stepping onto the front line when it matters.

You will also look at security through the lens of AI in a practical way. That includes using it to improve detection, triage, investigation and control assurance, and understanding the risks AI brings as the business adopts it.

DataVita is scaling quickly across cloud, infrastructure, managed services, customer environments, and critical facilities. Success means a measurably more secure business: fewer vulnerabilities, incidents handled properly, controls working in practice, and no weaknesses left unowned.

Key Responsibilities

• Own DataVita’s day-to-day security posture across cloud, infrastructure, managed services, customer environments and critical facilities.
• Lead the response to security incidents, judging how credible and serious each one is and acting in proportion, from immediate intervention to controlled containment and root-cause fixes.
• Find, prioritise and reduce vulnerabilities, working with technical teams to unblock fixes and see them through.
• Make sure access control, endpoint security, hardening, patching, logging and monitoring work in practice, not just on paper.
• Turn policies, standards, frameworks, audit requirements and customer commitments into controls and routines that work in a live environment.
• Check regularly that security controls are working as intended, and make sure every weakness has an owner and a plan.
• Assess and manage the security risks that come from third-party suppliers and services.
• Use AI to improve detection, prioritisation, triage, investigation and assurance, and advise on the security risks of adopting AI across the business.
• Partner with compliance, platform, infrastructure, service and leadership teams, challenging weak practice and raising standards.
• Keep the CTO informed of security posture, key risks and progress, focusing on outcomes rather than activity.
• Significant hands‑on experience in cyber security, security operations, or operational security roles where you were expected to take ownership and improve outcomes directly.
• Broad real‑world experience across multiple security domains, not just one area of specialism. This should include a meaningful mix of incident response, vulnerability management, access control, endpoint security, hardening, patching, logging, monitoring, and control improvement.
• Experience working in live operational environments where business reality, customer commitments, service delivery, and security all have to be balanced properly.
• Experience working directly with technical teams to identify weaknesses, unblock remediation, improve standards, and raise the bar in practice.
• Experience turning policies, frameworks, or compliance requirements into operational controls and routines that actually work.
• Clear evidence of independent judgment, ownership, and the ability to make proportionate decisions under pressure without close supervision.
• Evidence that you are already thinking differently because of AI, whether through improving operational efficiency, strengthening analysis and triage, enhancing detection and investigation, or helping the business adopt new ways of working safely.
• Experience in a managed service provider, cloud, infrastructure, hosting, or data centre environment.
• Experience supporting ISO 27001, Cyber Essentials, customer due diligence, audits, or contractual security obligations.
• Experience with SIEM, EDR, vulnerability management tooling, Microsoft 365 security, IAM, network security controls, and ITSM platforms.
• Experience helping onboard new services, platforms, or material operational changes securely.
• Relevant security certifications.

What You Will Get

• A business with serious market momentum and a nationally significant infrastructure pipeline.
• Exposure to cloud, colocation, HPC, and AI. This is not a single-product company.
• Clear progression as the business scales.
• Training and development throughout your time at DataVita.
• 33 days annual leave.
• Life assurance at 4x salary.
• Group income protection at 70% of salary for up to 2 years.
• Help@Hand: remote GP, physiotherapy, nutritionist, and more.
• Cycle to Work and EV car salary sacrifice schemes.
• 6 fully expensed company events per year.
• Option to donate to charity through salary.