Information Security Manager — Lead SOC & Incident Response

Recognise Bank; England; Hybrid; GBP 90,000 - 100,000; Full time

Benefits offered by this job

Hybrid Working

Private Medical Care

Enhanced Pension

Discretionary Bonus

Work From Anywhere

Job summary

Recognise Bank in the United Kingdom is seeking an Information Security Manager to own and run the 1st line security operations, including SIEM, EDR, vulnerability management, identity security and incident response.

You will work alongside the Information Security Officer, manage MSSP relationships, lead incident response, drive threat hunting, and deliver the security roadmap with governance and risk appetite.

Qualifications

• Proven hands-on experience in a SOC analyst or security engineer role, in a regulated environment.
• Strong knowledge of SIEM, EDR/XDR, and cloud security controls (AWS/Azure).
• Experience with vulnerability management and end-to-end incident response.
• Certifications such as CISSP, CISM, GIAC, CREST or similar are preferred.
• Experience in MSSP/supplier management in a UK financial services setting.

Responsibilities

• Own and run the SIEM, EDR and vulnerability management estate, driving detection, triage and remediation.
• Manage identity security controls across Entra ID, Purview, AWS and Azure; keep estate compliant.
• Lead incident response and containment efforts, escalating to leadership as needed.
• Coordinate penetration testing and remediation with suppliers.
• Drive threat hunting and detection engineering to improve proactive security posture.
• Produce security metrics and reports for board and regulators.

Skills

SOC Analyst

Security Engineer

SIEM / EDR

Microsoft Entra ID security

PowerShell / Python scripting

Cloud security (AWS, Azure)

MSSP / Supplier management

Governance & risk oversight

Threat hunting

Tools

Tenable

SentinelOne

Chronicle / Google SecOps

Microsoft Defender suite

AWS GuardDuty

Azure Security tools

Job description

Recognise Bank in the United Kingdom is seeking an Information Security Manager to own and run the 1st line security operations, including SIEM, EDR, vulnerability management, identity security and incident response.

You will work alongside the Information Security Officer, manage MSSP relationships, lead incident response, drive threat hunting, and deliver the security roadmap with governance and risk appetite.