SOC MANAGER

CCL Global; Exeter; On-site; GBP 90,000 - 120,000; Full time

Job summary

CCL Global is seeking a senior Cyber Security Operations Manager to lead a dedicated SOC and develop security monitoring, incident response and threat detection capabilities in a high-security environment.

The successful candidate will oversee a team of 8+ cyber security professionals, manage MSSPs and suppliers, and drive continuous improvement in security operations, metrics and reporting across the organisation.

Qualifications

• Senior leadership experience overseeing a SOC or cyber security operations function.
• Proven ability to mentor and develop cyber security teams.

Responsibilities

• Lead, manage and mentor a team of cyber security analysts within a SOC.
• Oversee detection, triage, escalation and resolution of incidents.
• Develop and improve SOC monitoring capabilities, use cases and playbooks.
• Collaborate with stakeholders and vendors to maintain performance against SLAs.
• Produce management reports on incidents, trends and risks.
• Drive continuous service improvement and post-incident reviews.

Skills

SOC management

Team leadership

Incident management

Threat detection

Security monitoring

SIEM

Vendor management

KPI reporting

Stakeholder engagement

Tools

SIEM platforms

Job description

CCL Global is currently recruiting for a Cyber Security Operations Manager to lead and develop a Security Operations Centre within a high-security, technology-focused environment.

This is a senior leadership position responsible for overseeing SOC operations, managing a team of 8+ cyber security professionals and driving the continuous improvement of security monitoring, incident response and threat detection capabilities.

The successful candidate will work across security operations, threat intelligence, incident management, stakeholder engagement and supplier management. The role is suited to an experienced SOC Manager, Security Operations Lead or senior Cyber Security Manager with a strong background in enterprise or high-security environments.

Key responsibilities

• Lead, manage and mentor a team of cyber security analysts.
• Oversee the detection, triage, escalation and resolution of cyber security incidents.
• Act as a senior escalation point for critical security alerts and incidents.
• Develop and improve SOC monitoring capabilities, detection rules, use cases and playbooks.
• Support proactive threat hunting and intrusion detection activities.
• Use threat intelligence, including OSINT and commercial intelligence, to identify emerging threats.
• Define cyber security metrics, KPIs and performance targets.
• Produce management reports on incidents, trends, risks and operational performance.
• Lead post-incident reviews and drive continuous service improvement.
• Manage relationships with MSSPs, vendors and technology partners.
• Oversee SLAs, KPIs and supplier performance.
• Work closely with internal stakeholders and wider security teams to improve organisational resilience.
• Proven experience leading or managing a SOC or cyber security operations function.
• Demonstrable experience managing and developing cyber security teams.
• Strong knowledge of incident management, response and escalation processes.
• Experience delivering and improving security monitoring capabilities.
• Practical experience with SIEM platforms and associated security monitoring tools.
• Knowledge of threat intelligence, proactive threat hunting and intrusion detection.
• Experience managing MSSPs, vendors or external technology partners.
• Strong understanding of SLAs, KPIs, service management and operational reporting.
• Ability to communicate technical risks and security information to senior stakeholders.
• Experience working within enterprise, government, defence or another high-security environment.

Desirable qualifications and experience

• CISSP, CISM or an equivalent cyber security certification.
• Experience with cloud security, particularly AWS or Azure.
• ITIL Foundation or an equivalent service management qualification.
• Experience working with government or regulated-sector security operations.
• Knowledge of recognised cyber security frameworks and best-practice standards.