Security Operations Lead | Hybrid, SIEM & SOC Oversight

River Island; Greater London; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Staff discount (50%)

Retail Trust benefits

Free onsite gym

Flexible working

Private pension

Job summary

River Island is strengthening its in-house security operations to complement its outsourced SOC. The Security Operations Lead will own day-to-day security operations cross stores, ecommerce, and distribution, while managing the relationship with the SOC provider and driving threat detection and response.

The role sits in a lean Information Security function at River Island's Head Office in Chelsea/West London.

Qualifications

• Proven experience in security operations, SOC management, or similar hands-on operational security role.
• Experience governing outsourced SOC/MSSP with SLA management and detection use-case development.
• Strong knowledge of SIEM, EDR, vulnerability and exposure management tooling.
• Incident response leadership and live investigations experience.
• Understanding of the three lines of defence model and cross-line operation.
• Familiarity with PCI DSS, UK GDPR, and NIST CSF control frameworks.
• Ability to balance security with customer experience in a lean team.

Responsibilities

• Own the operational delivery of security monitoring, detection, and response capability across corporate, retail, distribution, and ecommerce environments.
• Act as the internal escalation and coordination point for security alerts, incidents, and investigations raised by the outsourced SOC, ensuring timely triage and remediation.
• Operate and tune in-house security tooling to complement SOC-delivered detection.
• Lead incident response execution: contain, investigate, and coordinate recovery for security incidents, following playbooks.
• Coordinate vulnerability management end-to-end with Technology, Ecommerce, and Infrastructure teams.
• Support patching, hardening, and configuration management across store systems, cloud platforms, and ecommerce stack.
• Maintain and test incident response runbooks, tabletop exercises, and escalation paths including out-of-hours coverage with SOC.
• Provide governance and reporting on security operations KPIs to executives and governance forums.

Skills

Security operations

SOC governance

SIEM/EDR tooling

Incident response

3LOD framework

Compliance frameworks

Stakeholder management

Retail security

Headless commerce security

Tools

SIEM

EDR

Vulnerability management

Exposure management

Job description

River Island is strengthening its in-house security operations to complement its outsourced SOC. The Security Operations Lead will own day-to-day security operations cross stores, ecommerce, and distribution, while managing the relationship with the SOC provider and driving threat detection and response.

The role sits in a lean Information Security function at River Island's Head Office in Chelsea/West London.