Cyber Security Operations Manager

Anglian Water Services Ltd; City of Westminster; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading water utility provider is seeking a Security Operations Manager to safeguard its digital infrastructure. This role involves overseeing the Security Operations Centre, incident response, and collaboration with IT teams to ensure optimal security. Ideal candidates should possess strong leadership skills and significant experience in security operations. The role offers competitive benefits and the chance to impact security strategies.

Benefits

26 days leave plus bank holidays

Flexible working culture

Competitive pension scheme

Life assurance at eight times your salary

Bonus scheme

Qualifications

• Experienced in SecOps.
• Significant experience in Security Operations and Incident Response.
• Solid understanding of SIEM/SOAR, especially Sentinel.

Responsibilities

• Lead and manage the outsourced Security Operations Centre (SOC).
• Oversee real-time threat detection and response.
• Maintain and optimise the Cyber Incident Response Plan.

Skills

Leadership

Communication

Problem-solving

Relationship building

Technical Security Knowledge

Education

Degree level or equivalent

Technical qualifications (CISM, CISSP, etc.)

Tools

SIEM

SOAR

PKI

Job description

The Security Operations Manager plays a critical role in safeguarding the organisation's digital infrastructure (IT and OT) by leading the real‑time detection, response, and mitigation of cyber threats. This role oversees the Security Operations Centre (SOC), ensuring continuous monitoring of security events and alerts across the enterprise. The manager is responsible for orchestrating cyber incident response efforts, from initial detection through containment, remediation, and post‑incident analysis. A key part of the role involves managing and fine‑tuning security monitoring tools such as SIEM platforms to ensure optimal visibility and threat detection. The Security Operations Manager collaborates with IT, infrastructure, and platform teams to coordinate responses to vulnerabilities and ensure swift resolution of incidents. They also maintain and regularly test incident response plans, being central to simulation exercises to ensure readiness. This role demands a high level of technical expertise, leadership, and the ability to remain calm and decisive under pressure. The Security Operations Manager is the frontline defender of the organisation's cyber resilience, ensuring that threats are swiftly neutralised and that the business can operate securely and with confidence.

Responsibilities

• Lead and manage our outsourced Security Operations Centre (SOC) provider, ensuring high performance, continuous improvement, and alignment with business priorities.
• Oversee real‑time threat detection, triage, and response – driving swift, effective action when incidents occur.
• Own and maintain the organisation's Cyber Incident Response Plan, coordinating major incident responses and ensuring lessons learned translate into stronger defences.
• Manage and optimise key technical controls, including SIEM, SOAR, PKI, and email security tools, to maintain robust detection and response capabilities.
• Collaborate with delivery partners and internal teams to improve service quality, mitigate risks, and enhance security posture.
• Drive the continuous maturity and modernisation of our detective controls and SOC operations, ensuring alignment with the NIST framework.
• Provide clear reporting and insights to senior stakeholders, ensuring informed decisions and proactive risk management.

Leadership & Communication

• Strong people leadership style, capable of guiding teams and partners with empathy, direction, and accountability.
• Excellent interpersonal and communication skills – thrives under pressure and brings clarity and composure to complex situations.
• Deep problem‑solving skills and pragmatic mindset to find balanced, effective solutions in fast‑moving or high‑stakes environments.
• Skilled at translating technical concepts into plain English, making complex issues clear and actionable for senior leaders and stakeholders.
• Confident in managing conflict and competing priorities, fostering collaboration and maintaining focus on achieving the best outcomes for the organisation.

Qualifications

• Qualified to Degree level or equivalent.
• Technical qualifications such as CISM, CISSP, CIPPE, CCSP, GICSP.
• Experienced in SecOps.
• Relationship building with team, colleagues, internal customers and external suppliers.
• Significant experience in Security Operations and Incident Response.
• Broad technical competence in IT and Cyber.
• Broad technical competence in OT.
• Solid understanding of SIEM/SOAR, especially Sentinel.

At Anglian Water, we play a vital role in safeguarding one of life's most essential resources – and protecting the systems that keep it flowing is critical to our mission. As our Security Operations Manager, you'll be at the heart of that protection, leading the defence of our digital infrastructure that underpins services for millions of customers every day.

You’ll have the opportunity to shape how we detect, respond to, and recover from cyber threats – influencing strategic decisions and driving continuous improvement across our security landscape. In return, you’ll join a forward‑thinking, inclusive organisation that values innovation, personal growth, and work‑life balance. You’ll work alongside passionate professionals, gain exposure to cutting‑edge technology, and make a genuine difference in protecting essential services that communities rely on.

Benefits

• 26 days leave, rising with service + bank holidays, with the option to swap Christmas and Easter holidays for those celebrated by your religion.
• A flexible working culture.
• Competitive pension scheme – we double‑match your contributions up to 6 %.
• Life assurance at eight times your salary.
• Personal accident cover – up to 5× your salary.
• Bonus scheme.