Executive Director, Cybersecurity Operations & Incident Response

CLS-Group; Greater London; On-site; GBP 134,000 - 179,000; Full time

Benefits offered by this job

Hybrid working

Private medical insurance

Pension plan

Volunteer days

LinkedIn Learning access

Job summary

CLS is seeking an Executive Director, Head of Cybersecurity Operations to lead proactive threat detection, incident response, and forensic capabilities across a global FX security program. The role reports to the CISO US Services and sits in London or Iselin with on-site requirements.

Ideal candidates will have 15+ years in cybersecurity/SOC and 10+ years in leadership, with hands-on SIEM/SOAR, cloud security, and incident response expertise.

Qualifications

• Bachelor’s degree in cybersecurity or IT, with master’s preferred.
• 15+ years in cybersecurity / SOC roles, ideally within CLS ecosystem.
• 10+ years in cybersecurity/SOC leadership.
• Experience in regulated operations and governance; reporting to senior leadership.

Responsibilities

• Establish strategic vision and framework for the Cyber Operations team.
• Lead Incident Response capabilities and guide DLP/UEBA rule development.
• Oversee Purple Team program integrating offensive security with controls.
• Develop executive reporting on security posture, threats, and incidents.
• Manage vendor relationships and cross-functional stakeholder engagement.

Skills

Cybersecurity Leadership

Threat Detection

Incident Response

Stakeholder Communication

Vendor Management

Education

Bachelor’s in Cybersecurity

Master’s degree preferred

Tools

SIEM/SOAR

Cloud Security

Endpoint Security

Digital Forensics

Malware Analysis

Job description

CLS is seeking an Executive Director, Head of Cybersecurity Operations to lead proactive threat detection, incident response, and forensic capabilities across a global FX security program. The role reports to the CISO US Services and sits in London or Iselin with on-site requirements.

Ideal candidates will have 15+ years in cybersecurity/SOC and 10+ years in leadership, with hands-on SIEM/SOAR, cloud security, and incident response expertise.