Cybersecurity Operations Manager

TESTQ Technologies LTD.; Sheffield; On-site; GBP 120,000 - 150,000; Part time

Job summary

TESTQ Technologies LTD. is seeking a Cybersecurity Operations Manager to lead a global security operations team onsite in the UK, delivering continuous threat detection and rapid incident response.

The role requires senior leadership, advanced cyber security knowledge, and a track record of managing complex security programs in regulated environments. You will coordinate with regional teams and CTO colleagues to ensure security capabilities stay current, scalable, and effective while driving

Qualifications

• Demonstrated leadership of large security operations teams and programs.
• Strong incident response management and decision making under pressure.
• Experience collaborating with CTO and cybersecurity peers across regions.

Responsibilities

• Lead a global Cybersecurity Operations team providing 24x7x365 detection and response.
• Oversee automation and orchestration to improve efficiency and reduce false positives.
• Collaborate with global cybersecurity and CTO teams to keep tech capabilities fit for purpose.
• Focus analysis on high-risk issues, not repetitive low-risk tasks.
• Develop and maintain incident response playbooks and monitoring use cases.
• Communicate progress and risks to regional stakeholders and executives.

Skills

Automation

Major incident management

Stakeholder management

Education

Formal degree in Information Security / Cyber Security / Computer Science

Advanced degree preferred

Tools

Windows

Linux

Networking hardware

Cloud platforms (AWS/Azure/Google)

Job description

TQUSI0891_5886 - Cybersecurity Operations Manager

Job Type: Contract

Work Mode: Onsite (Client)

The Cybersecurity Operations Manager is accountable for

• Leading a team of 4050 highly skilled security professionals providing a global service to detect and respond to cyber security threats
• Working seamlessly with their global peers to provide 24 x 7 x 365 coverage for the critical global Cybersecurity Operations services
• Developing managing and maintaining a highly skilled efficient and effective local team across all Cybersecurity Operations service lines Including the definition management and continuous improvement of core functions and processes that underpin a successful effective and globally scaled monitoring ing and security incident response capability
• Owning and managing collaboration with the wider Cybersecurity and CTO teams to ensure that the core underlying technological capabilities that underpin an effective and efficient operational response to current and anticipated threats and trends remain fit for purpose
• Identification of processes that can be automated and orchestrated to ensure maximum efficiency of global Cybersecurity Operations resources
• Ensuring analysis time is efficiently focused on the more challenging and potentially higher risk problems and tasks not on highvolumelow risk repetitive tasks or processes thus helping to effectively reduce false positive and false negative events
• Managing and owning the collaboration with the wider Cybersecurity teams and wider business function teams where applicable in the production and maintenance of efficient and effective security event monitoring and ing usecases and incident response playbooks
• Maintaining a global view of the GCOI mission and work with local stakeholders in region and country to bring together both the global perspective as well as the more local message in a clear and effective way that demonstrates

Technical Skills

• Expert level knowledge and demonstrated experience of common intelligence sharing platforms protocols and experience operating within a collective defence environment with internal stakeholders and external partners
• Expert level knowledge of common enterprise technology infrastructure platforms and tooling including Windows Linux infrastructure management and networking hardware
• Expert level knowledge of intelligence analysis principles either though formal education training or equivalent professional experience
• Expert level knowledge and demonstrated experience in analysis and dissection of advanced attacker tactics techniques and procedures in order to inform adjustments to the control plane
• Expert level knowledge of scripting programming andor development of bespoke tooling or solutions to solve unique problems
• Ability to identify develop and track key performance indicator KPI metrics for accurate and contextual evaluation of operational effectiveness as well as providing recommendations for control improvement and mitigating control adjustments
• Expert knowledge and technical experience of 3rd party cloud computing platforms such as AWS Azure and Google
• Industry Experience and Qualifications
• Industry recognised cyber security related certifications including CEH EnCE SANS CISSP CISM CRISC andor CISA
• Formal education and advanced degree in Information Security Cyber security Computer Science or similar andor commensurate demonstrated work experience in the same
• A broad and extensive security operations background
• Operated at a senior management level with exposure to global executives
• Experience in a senior leadership position within a large global and highly regulated organisation including handson experience of complex data centre environments managing large highly technical teams in operational environments preferably with shift management experience
• 10 years of experience in Cyber security operations management Cyber security management in a leadership position

Mandatory Skills : Automation, Major incident management, Stakeholder Management