Cyber Security Operations Manager

LHH; Exeter; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Hybrid working

Job summary

LHH is seeking an experienced Cyber Security Operations Manager for a contract role in Exeter with hybrid working. The role requires leading a SOC team in a major public sector environment and holding active SC Clearance.

You will drive incident response, threat monitoring and improvement across the security operations function. The candidate will manage detection, triage and escalation of incidents, collaborate with government partners and external vendors, and report on security metrics to

Qualifications

• Proven experience leading and managing Cyber Security Operations or SOC teams.
• Experience in security incident detection, triage, escalation and resolution.

Responsibilities

• Lead, mentor and manage a team of Cyber Security Analysts and SOC professionals.
• Oversee security monitoring and SOC operations; develop detection rules and use cases.
• Coordinate incident response, post-incident reviews and continuous improvement.

Skills

Leadership

SOC management

Incident management

Threat intelligence

Stakeholder engagement

Budget management

MSSP management

Tools

SIEM tools

Threat detection tools

Security monitoring solutions

Job description

Here’s a rewritten version tailored for a contract opportunity in Exeter with a clear emphasis that candidates must hold active SC Clearance

Cyber Security Operations Manager

Contract Role | Exeter (Hybrid) MUST HOLD ACTIVE SC CLEARANCE

We are seeking an experienced Cyber Security Operations Manager to lead and develop a high-performing Security Operations Centre (SOC) function within a major public sector environment based in Exeter.

This is a senior leadership position responsible for driving the organisation’s cyber security operations strategy, ensuring the effective detection, response, containment and recovery from cyber threats and security incidents. You will lead a team of over eight cyber security professionals while continuously enhancing security monitoring, incident management and threat intelligence capabilities.

The successful candidate will play a key role in maintaining and improving the organisation’s overall cyber security posture, working closely with internal stakeholders, government security partners and third‑party service providers.

Key Responsibilities

• Lead, mentor and manage a team of Cyber Security Analysts and SOC professionals.
• Foster a culture of continuous improvement, learning and professional development.
• Support career progression and capability development across the team.
• Lead the detection, triage, escalation and resolution of cyber security incidents.
• Assess the impact of critical security events and coordinate effective response activities.
• Conduct post‑incident reviews and drive continuous improvements to processes and procedures.
• Lead cyber incident exercises and testing to validate response plans.

Security Monitoring & SOC Operations

• Act as the senior escalation point for security alerts and investigations.
• Oversee and enhance security monitoring capabilities across the environment.
• Direct the development, tuning and optimisation of detection rules and use cases.
• Drive proactive threat hunting activities and continuous monitoring improvements.
• Monitor emerging cyber threats, vulnerabilities and attack techniques.
• Integrate threat intelligence into operational security activities.
• Provide actionable intelligence and risk insights to technical and non‑technical stakeholders.
• Define and report on key cyber security metrics, KPIs and performance measures.
• Produce regular management reports covering security incidents, trends and operational effectiveness.
• Translate technical findings into business‑focused risk and security recommendations.
• Manage relationships with Managed Security Service Providers (MSSPs), technology partners and external vendors.
• Ensure contractual commitments, SLAs and KPIs are met and exceeded where possible.
• Act as a key interface with government and cross‑department security organisations.

Resource & Budget Management

• Support cyber security budget planning and resource allocation.
• Ensure security investments align with operational requirements and business objectives.
• Proven experience leading and managing Cyber Security Operations or Security Operations Centre (SOC) teams.
• Strong leadership, communication, stakeholder engagement and service management capabilities.
• Extensive experience managing cyber security incidents from detection through to resolution and post‑incident review.
• Hands‑on experience delivering and improving security monitoring capabilities, including threat hunting and intrusion detection.
• Strong understanding of threat intelligence processes, including the analysis of OSINT and commercial threat intelligence sources.
• Experience operating and managing cyber security technologies including:
• SIEM platforms
• Threat detection and response tools
• Security monitoring solutions
• Security documentation and operational procedures
• Demonstrable experience managing third‑party suppliers, MSSPs, vendor relationships, SLAs and performance metrics.
• Experience presenting cyber security risks and operational reporting to senior stakeholders.

Desirable Skills & Qualifications

• CISSP, CISM or equivalent cyber security certification.
• Experience with cloud security technologies and environments, including AWS and Azure.
• Experience working within government, defence or highly regulated environments.

Security Clearance

Candidates must hold active SC (Security Check) Clearance as a mandatory requirement. Unfortunately, candidates without current SC Clearance cannot be considered for this opportunity.

Location

Exeter (Hybrid Working Available)

• Contract position
• Immediate start preferred

This role is ideal for an experienced Cyber Security Operations leader with a strong SOC background, excellent stakeholder management skills, and proven experience operating within secure, mission‑critical environments.