Hybrid Cyber Security Operations Lead

Buckinghamshire Council; Aylesbury; Hybrid; GBP 70,000 - 95,000; Full time

Benefits offered by this job

Pension scheme

Discounts on local cafés/restaurants

Gym memberships

Costco membership

Flexible working

Employee assistance programme

Job summary

Buckinghamshire Council is seeking an IT Security Operations Lead to drive cyber security detection, incident response and governance across the organisation. You will lead security monitoring, threat detection and incident response with the SOC and IT teams, ensuring resilient services for communities.

You will work with industry frameworks such as NIST, MITRE ATT&CK, SIEM, SOAR and EDR, collaborating with stakeholders to embed best practices and continuous improvement across security

Qualifications

• Experience leading cyber security operations across large IT estates.
• Proven ability to detect, analyse and respond to threats in real time.
• Skilled in implementing and improving security tooling and incident response processes.
• Familiarity with industry frameworks and governance best practices.

Responsibilities

• Lead cyber security detection and response capabilities across the SOC.
• Oversee incident management, investigations and threat mitigation activities.
• Drive continuous improvements to security tools, processes and controls.
• Provide expert reporting and assurance to stakeholders and governance groups.

Skills

Threat detection

Incident response

Security monitoring

Governance & compliance

Stakeholder comms

Security tooling

Education

Degree in Cyber Security

CISSP

CISM

ITIL Foundation

Tools

SIEM

SOAR

EDR

MITRE ATT&CK

Job description

Buckinghamshire Council is seeking an IT Security Operations Lead to drive cyber security detection, incident response and governance across the organisation. You will lead security monitoring, threat detection and incident response with the SOC and IT teams, ensuring resilient services for communities.

You will work with industry frameworks such as NIST, MITRE ATT&CK, SIEM, SOAR and EDR, collaborating with stakeholders to embed best practices and continuous improvement across security