Security Operations Manager (SOC)

JAM IT Consultancy Ltd; England; On-site; GBP 70,000 - 90,000; Full time

Job summary

A leading IT consultancy in the UK is looking for an experienced SOC Manager to lead their Security Operations Centre. This role involves managing security incidents, establishing security policies, and ensuring compliance with industry standards. The ideal candidate has a degree in IT Security, relevant industry certifications, and a strong background in security management. This position requires excellent leadership and technical skills to protect critical business data.

Benefits

Competitive salary

Professional development opportunities

Health and wellness programs

Qualifications

• Degree qualified in a relevant field.
• Certified in industry-standard security certifications.
• Extensive experience in IT Security Management.

Responsibilities

• Lead the Security Operations Centre (SOC) function.
• Establish security policies and processes.
• Manage security incident response effectively.

Skills

Leadership

IT Security Management

Technical Vulnerability Assessment

Incident Response

Compliance Knowledge

Education

Degree in IT Security or related field

Industry Certifications (CISSP, CISM, etc.)

Tools

Security Information and Event Management (SIEM)

Network Security Tools

Job description

Leads the Security Operations Centre (SOC) function and provides support to the CISO on technical security. Proposes and advocates on technical security strategies and implements policies and processes in support of internal IT systems, private cloud and public cloud usage. Drives the technical functions within the business to protect customer and business data/systems at all times. This is a highly technical role working within the CISO function which manages information security, certifications, compliance and quality. Degree qualified, and with Industry Certifications –

Build, Develop & Maintain SOC function

• Build a team, policies, technologies and processes to develop a world-class security function.
• Leads on all technical aspects of IT security for the commercial operations and internal systems.
• Selection, implementation, maintenance and use of security tools to provide relevant management information and provide protection.
• Responsibility for the security incident response process ensuring that this process is annually tested, and iteratively improved.

Technical Delivery

• To provide high quality IT Security guidance documentation and training in conjunction with the CISO to the internal technology teams (Internal IT, Operations, Application Development).
• Carry out technical vulnerability assessments of IT systems and processes, identifying potential vulnerabilities to Platform(s) and Corporate systems and processes, making recommendations to the technology management and the CISO to minimise risks identified.
• To liaise with external security agencies where required and ensure that any information requested is provided on a timely and secure basis.
• Contribution to the architectural functions in each team to ensure that privacy and security by designs are created with final compliance as a goal.
• Responsible for ensuring any new vulnerabilities are resolved/mitigated in line with risk based prioritisation (business and technical).

Business-wide Impact

• Lead and act as a strategic and tactical partner in the operational and technical development of the SOC (Security Operations Centre).
• Liaise with other key functions within the business as required. These include; CTO, CIO, CISO, Operations, Infrastructure Services, Support, Sales & Procurement.
• Establish and maintain excellent relationships with all other technology groups.
• Initiate review and suggest improvements to the products (through Product Management) and services provided.
• To respond rapidly and effectively to IT security incidents, managing them in a professional manor, reporting to the CISO.
• Assist in performing computer forensics for evidence gathering and preservation.
• To contribute to the IT risk register and carry out assigned actions to mitigate risks identified
• To keep up to date with security trends, threats and control measures

SOC Team Management

• Manage and lead the SOC team on a daily basis to meet and exceed customer contractual obligations.
• Provide leadership, guidance and mentoring to IT staff within the SOC team and across the wider technology group.
• Motivate immediate team on a daily basis to deliver across their key areas of responsibility.
• Respond to and assist team members to resolve escalations or find assistance for technical questions.
• Ensure the team are trained in processes and procedures, fully documenting and maintaining processes for reference, training and audit purposes.
• Identify training needs across the team and design/source training that will meet these requirements.
• Invest in the personal development of the team, continuously improving their soft skills, customer service, technical skills and problem solving. Proactively address areas of poor performance with the team and support them to improve.
• Motivate, coach and develop the team on a daily basis. Give regular constructive feedback and recognise good behaviour/performance.
• Provide weekly reports/updates on team activity, project progress etc. as required.

Effectively manage and monitor resource levels, and deciding on task priorities for team members.

Certifications, Compliance and Investigation

• Participate and take an active role in investigations as required.
• Provide input into the CISO’s Risk Committee to ensure IT Security is included in risk and compliance reports.
• Design and implement systems/process that meet agreed security requirements. Documenting the process and procedures wherever necessary as part of the PCI and ISO27001 requirements and to ensure a knowledge base is created and maintained.
• Participate and take an active role for Business Continuity planning across the global businesses.
• Act as the IT Security escalation point within the business for all Technology Security operational issues.

Manage security incidents and events to protect Corporate information technology (IT) assets, intellectual property, fixed assets, and Redwood’s reputation working alongside the CISO