Cybersecurity Operations Manager

Square One Resources; Sheffield; Hybrid; GBP 16,974,000 - 19,004,000; Full time

Job summary

Square One Resources in Sheffield is seeking a Cybersecurity Operations Manager to lead a global security operations function. You will manage the detection, response and resilience of security services across regions, ensuring continuous protection and effective handovers between teams.

The role emphasizes automation, KPI-driven improvements and collaboration with CTO and wider tech teams to keep security capabilities fit for purpose. This is a hybrid posting with 3 days on-site weekly.

Qualifications

• Experience leading cybersecurity operations in large organizations.
• Proven ability to manage 24/7/365 security coverage.
• Strong knowledge of Windows, Linux, infrastructure and networking.
• Experience with security monitoring, incident response and playbooks.
• Certifications such as CISSP/CISM desirable.

Responsibilities

• Lead a team delivering global threat detection and incident response.
• Maintain 24/7/365 security coverage with global teams.
• Develop and improve local cybersecurity operations processes.
• Oversee monitoring, incident response and operational effectiveness.
• Identify opportunities to automate security processes.

Skills

Cybersecurity Operations

Automation

Major Incident Management

Stakeholder Management

Security Operations Leadership

Incident Response

Threat Detection

Education

Degree in Cybersecurity or related discipline

Tools

AWS

Azure

Google Cloud

Job description

CyberSecurity Operations Manager

Location: Sheffield, UK
Contract: 6 Months
Rate: £400-£450 per day
IR35: Inside IR35
Working Pattern: Hybrid - 3 days per week onsite

Role Overview

We are currently recruiting for an experienced Cybersecurity Operations Manager to lead a highly skilled security operations function within a large, complex and globally connected organisation.

The successful candidate will be responsible for the management, efficiency and effectiveness of cybersecurity defence services, including the detection, management and response to security incidents. You will work closely with global security teams to support a 24/7/365 operational capability, ensuring effective handovers between regional teams.

Key Responsibilities

• Lead a team of highly skilled cybersecurity professionals delivering global threat detection and incident response services.
• Work collaboratively with global Cybersecurity Operations teams to maintain 24/7/365 security coverage.
• Develop, manage and continuously improve local Cybersecurity Operations processes and capabilities.
• Oversee security monitoring, incident response, and operational effectiveness.
• Identify opportunities to automate and orchestrate repetitive security processes.
• Improve operational efficiency by reducing false positives and false negatives.
• Develop and maintain effective security monitoring use cases and incident response playbooks.
• Work closely with Cybersecurity, the CTO, and wider technology teams to ensure security capabilities remain fit for purpose.
• Analyse advanced attacker Tactics, Techniques and Procedures (TTPs) and use findings to improve security controls.
• Establish and track KPI metrics to measure operational effectiveness and identify opportunities for control improvement.
• Maintain a global operational perspective while working closely with regional and local stakeholders.
• Provide leadership and support to a highly technical security operations team.

Technical Experience

• Expert knowledge of cybersecurity operations and collective defence environments.
• Strong understanding of Windows, Linux, infrastructure and networking technologies.
• Experience with intelligence analysis and cybersecurity threat intelligence principles.
• Strong knowledge of attacker TTPs, threat detection and security control improvement.
• Advanced scripting, programming or development experience for bespoke security tooling and solutions.
• Experience developing and tracking cybersecurity KPI metrics.
• Strong cloud security experience across AWS, Azure and/or Google Cloud.
• Experience with security automation and orchestration.

Experience & Qualifications

• Previous experience within cybersecurity operations, cybersecurity management or a senior security leadership position.
• Proven experience managing large, highly technical cybersecurity teams.
• Experience operating within large, complex and highly regulated organisations.
• Experience working within complex data centre and enterprise technology environments.Previous experience managing operational teams, ideally including shift-based or 24/7 environments.
• Industry-recognised cybersecurity certifications such as CISSP, CISM, CRISC, CISA, CEH or SANS are desirable.
• Degree-level education in Cybersecurity, Information Security, Computer Science or a related discipline, or equivalent professional experience.

Mandatory Skills

Cybersecurity Operations | Automation | Major Incident Management | Stakeholder Management | Security Operations Leadership | Incident Response | Threat Detection

Disclaimer
Notwithstanding any guidelines given to level of experience sought, we will consider candidates from outside this range if they can demonstrate the necessary competencies.
Square One is acting as both an employment agency and an employment business, and is an equal opportunities recruitment business. Square One embraces diversity and will treat everyone equally. Please see our website for our full diversity statement.