Global Security Operations Center (SOC) Lead – Vendor Governance

Matchtech Group; Milano; Hybrid; EUR 80,000 - 100,000; Full time

Benefits offered by this job

Competitive salary + bonus and benefits package

Access to a global learning platform

Wellness programs focused on physical and mental health

Job summary

Matchtech is seeking a skilled cybersecurity professional in Bollate (Milano) for a permanent position. This role focuses on leading Security Operations Center (SOC) functions and ensuring high-quality service delivery from external cybersecurity providers.

The ideal candidate will excel in vendor management, performance metrics, and have strong experience in a global, cross-functional environment. With a hybrid working model, two days a week in the office, this position offers a competitive salary and benefits.

Qualifications

• 8–10 years of experience leading SOC operations in complex or multinational environments.
• Proven experience with SIEM solutions and cybersecurity software.
• Relevant cybersecurity certifications (CISSP, CISM, or equivalent).

Responsibilities

• Lead Security Operations Center (SOC) functions in a multinational environment.
• Collaborate with global security and IT teams.
• Define and implement KPIs that SOC providers must meet.

Skills

Vendor management

Service governance

Understanding of cybersecurity operations

Technical bid management

Performance management

Education

Bachelor's degree in Computer Science or Cybersecurity

Tools

SIEM solutions (Splunk, Sentinel, Chronicle)

EDR platforms (CrowdStrike, Microsoft Defender)

SOAR technologies

Job description

Hybrid – Bollate (Milano), 2 days a week in the office

Ready to Make an Impact?

This is a permanent role with strong local responsibility and high visibility within a global organization. You will play a key role ensuring that external cybersecurity providers deliver high-quality, scalable, and efficient SOC services across multiple regions.

This position is ideal for someone who excels in vendor strategy, service governance, and cybersecurity procurement, rather than hands-on SOC operations.

What You Will Do

Leading Security Operations Center (SOC) functions in a multinational environment.

Stakeholder & Global Coordination

• Act as the main interface between internal stakeholders and external SOC cybersecurity providers.
• Collaborate with global security, IT, risk, and procurement teams.
• Provide strategic reporting and insights to senior leadership based on vendor performance and service outcomes

KPI Definition & Performance Management

• Define and implement KPIs and success metrics that SOC providers must meet, aligned with business and security objectives.
• Establish performance dashboards and reporting models to track vendor effectiveness and service quality.
• Challenge providers on delivery, driving continuous improvement and accountability.

Global SLA Governance

• Oversee and govern SLAs delivered by SOC and cybersecurity providers across multiple sites globally.
• Ensure consistency, scalability, and quality of services across regions (including remote service delivery models).
• Manage escalations at a strategic level, ensuring issues are resolved efficiently and improvements are implemented.
• Ensure that all externally delivered SOC services meet organizational standards, regulatory requirements, and security strategy.
• Drive service maturity by working closely with vendors to enhance detection, response, and resilience capabilities.
• Align vendor services with evolving threats, risk landscape, and global security roadmap.

Other:

• Lead technical bid processes (RFP/RFI/RFQ) for SOC and cybersecurity services, ensuring the organization is strongly positioned when onboarding new providers.
• Define evaluation criteria, technical requirements, and governance frameworks for selecting cybersecurity vendors.
• Support market consultations and vendor benchmarking to continuously optimize the SOC provider ecosystem.

What We’re Looking For

• Strong experience in vendor management, SLAs, and managed security services (MSSP/SOC).
• Proven track record in running technical bids (RFPs) and vendor selection processes.
• Experience defining KPIs, performance frameworks, and governance models.
• Good understanding of cybersecurity operations and incident response, without necessarily being hands-on.
• Ability to operate in a global, cross-functional environment with high stakeholder exposure.

What You Bring

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field.
• 8–10 years of experience leading SOC operations in complex or multinational environments.
• Proven experience with SIEM solutions (Splunk, Sentinel, Chronicle),
• EDR platforms (CrowdStrike, Microsoft Defender), and SOAR technologies.
• Strong background in Identity and Access Management (IAM) strategies for large user populations.
• Solid project management skills, including experience in large‑scale technology migrations.
• Relevant cybersecurity certifications (CISSP, CISM, or equivalent).
• Excellent English communication skills, both written and spoken.
• Strong leadership, ownership, and the ability to influence teams and stakeholders.

What You Will Gain

• Competitive salary + bonus and benefits package.
• Hybrid model (2 days a week in Bollate, Milano).
• Extended parental and co-parental leave.
• Access to a global learning platform and free language training (24 languages).
• Comprehensive wellness programs focused on physical and mental health.
• The opportunity to join a team committed to innovation, sustainability, and scientific excellence.