Reporting Lead

EC-Council Global Services; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

EC-Council is seeking a SOC Reporting Lead in Kuala Lumpur, on-site to oversee day-to-day SOC reporting and lead a team of Reporting Security Analysts.

You will drive monthly reporting, threat intelligence, and client-facing dashboards while ensuring SLA and KPI targets are met; collaborate with SOC managers, engineers, and service delivery teams to continuously improve security operations.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Data Analytics, or a related field.
• 3–5 years of relevant experience in Security Operations, cybersecurity reporting, SOC service delivery, security analytics, or a related function.
• Minimum 1–2 years of experience owning or leading SOC reporting, metrics, dashboards, or service-performance reporting.
• Strong understanding of SOC operations, including incident management, alert monitoring, escalation processes, SLA/KPI tracking, and security operations metrics.
• Hands-on experience preparing daily, weekly, monthly and executive-level SOC reports, including incident trends, SLA performance, alert volumes, MTTD/MTTR and operational KPIs.
• Experience extracting and validating information from SIEM, ticketing and security platforms such as Splunk, Microsoft Sentinel, QRadar, ServiceNow or equivalent.
• Excellent written and verbal communication skills, particularly the ability to translate technical cybersecurity information into clear business and management-level reporting.
• Strong stakeholder-management skills and ability to coordinate with SOC Analysts, Engineers, SOC Management and client/customer stakeholders.
• Ability to manage multiple reporting deadlines and deliver accurate reports within agreed timelines.
• Familiarity with cybersecurity frameworks and standards such as NIST, ISO 27001, MITRE ATT&CK or similar.

Responsibilities

• Responsible over the day-to-day Security Operation Centre (SOC) Reporting and working closely with the SOC Manager
• Responsible to manage a group of Reporting Security Analyst – managing their career, performance, training and coaching.
• Responsible for entire reporting include SOC Monthly reporting and quality of the Threat Intelligence reporting, external risk rating, CWA, ETA reporting.
• Monitor and report on progress in completing reporting projects and deliverables.
• Responsible for Process Improvement/automation of the SOC reporting and ensuring Monthly SLA is met, Monthly KPIs are met, Monthly reports are delivered on time.
• Leverage your experience and provide contribution as a team to security monitoring, incident response, threat intelligence, threat hunting, vulnerability management, and/or security engineering to assess and develop security operations capabilities across people, process and technology.
• Support and contribute to refine security operations policies, standards, guidelines, processes, plan, playbooks, runbooks, procedures and other documents based on SOC and client’s needs.
• Consistently working on ways to lower operational cost through process improvement and innovations.
• Ensuring daily operation run smooth and in order, all processes are followed, reports are generated on time, documents are available and created and up to date.
• Responsible for the SIEM infrastructure as users and continuously ensuring the logs are fed into all the SIEM architecture to ensure no disruption on SOC reporting and SOC Monitoring (where applicable)
• Provide guidance and advise regarding the governance, performance, and management of the security operations.
• Innovate on behalf of customer and ensure the clients are happy with the SOC services and visit customer regularly on service improvements and feedback. This includes working closely with the Service Delivery Manager.
• Lead pre and post sales meetings and presentation with the clients (where required).
• Manage the delivery engagements against established schedules and budgets, coordinating with assigned resources and delivery partners (where required).
• Mentor and motivate team members to provide outstanding client service.
• Oversee hiring, training, and evaluating staff, and off boarding of staff.
• Assisting other teams such as Pre-Sales Team for SOC related initiatives or tenders.
• Supporting the organization’s ISO27001 and CREST initiatives, focusing on the SOC and involvement in internal and external audits relating to SOC (where required).
• And other tasks which is required to be fulfilled as instructed by SOC Director/Senior Management as part of SOC continuous improvement and projects

Skills

SOC reporting

Stakeholder management

Incident management

SLA tracking

Executive reporting

Threat intelligence

Security operations

Education

Bachelor's degree in Cybersecurity/IT/CS/Data Analytics

Tools

Splunk

Microsoft Sentinel

QRadar

ServiceNow

Job description

Location : Kuala Lumpur, Malaysia, On-Site

Job ID : R-8104

#ECGS

Job Title: SOC Reporting Lead

EC-Council is the world's largest cyber security technical certification body. We operate in 145 countries globally and we are the owner and developer of various world-famous cyber security programs. We are proud to have trained and certified over 400,000 information security professionals globally that have influenced the cyber security mindset of countless organizations worldwide.

Visit us on www.eccouncil.org

Job Descriptions

• Responsible over the day-to-day Security Operation Centre (SOC) Reporting and working closely with the SOC Manager
• Responsible to manage a group of Reporting Security Analyst – managing their career, performance, training and coaching.
• Responsible for entire reporting include SOC Monthly reporting and quality of the Threat Intelligence reporting, external risk rating, CWA, ETA reporting.
• Monitor and report on progress in completing reporting projects and deliverables.
• Responsible for Process Improvement/automation of the SOC reporting and ensuring Monthly SLA is met, Monthly KPIs are met, Monthly reports are delivered on time.
• Leverage your experience and provide contribution as a team to security monitoring, incident response, threat intelligence, threat hunting, vulnerability management, and/or security engineering to assess and develop security operations capabilities across people, process and technology.
• Support and contribute to refine security operations policies, standards, guidelines, processes, plan, playbooks, runbooks, procedures and other documents based on SOC and client’s needs.
• Consistently working on ways to lower operational cost through process improvement and innovations.
• Ensuring daily operation run smooth and in order, all processes are followed, reports are generated on time, documents are available and created and up to date.
• Responsible for the SIEM infrastructure as users and continuously ensuring the logs are fed into all the SIEM architecture to ensure no disruption on SOC reporting and SOC Monitoring (where applicable)
• Provide guidance and advise regarding the governance, performance, and management of the security operations.
• Innovate on behalf of customer and ensure the clients are happy with the SOC services and visit customer regularly on service improvements and feedback. This includes working closely with the Service Delivery Manager.
• Lead pre and post sales meetings and presentation with the clients (where required).
• Manage the delivery engagements against established schedules and budgets, coordinating with assigned resources and delivery partners (where required).
• Mentor and motivate team members to provide outstanding client service.
• Oversee hiring, training, and evaluating staff, and off boarding of staff.
• Assisting other teams such as Pre-Sales Team for SOC related initiatives or tenders.
• Supporting the organization’s ISO27001 and CREST initiatives, focusing on the SOC and involvement in internal and external audits relating to SOC (where required).
• And other tasks which is required to be fulfilled as instructed by SOC Director/Senior Management as part of SOC continuous improvement and projects

Requirements / Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Data Analytics, or a related field.
• 3–5 years of relevant experience in Security Operations, cybersecurity reporting, SOC service delivery, security analytics, or a related function.
• Minimum 1–2 years of experience owning or leading SOC reporting, metrics, dashboards, or service-performance reporting.
• Strong understanding of SOC operations, including incident management, alert monitoring, escalation processes, SLA/KPI tracking, and security operations metrics.
• Hands‑on experience preparing daily, weekly, monthly and executive‑level SOC reports, including incident trends, SLA performance, alert volumes, MTTD/MTTR and operational KPIs.
• Experience extracting and validating information from SIEM, ticketing and security platforms such as Splunk, Microsoft Sentinel, QRadar, ServiceNow or equivalent.
• Excellent written and verbal communication skills, particularly the ability to translate technical cybersecurity information into clear business and management‑level reporting.
• Strong stakeholder‑management skills and ability to coordinate with SOC Analysts, Engineers, SOC Management and client/customer stakeholders.
• Ability to manage multiple reporting deadlines and deliver accurate reports within agreed timelines.
• Familiarity with cybersecurity frameworks and standards such as NIST, ISO 27001, MITRE ATT&CK or similar.

Additional Information

EC-Council is an equal opportunity workplace and an affirmative action employer. We are committed to providing equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or veteran status. We do not discriminate based on these or any other characteristics protected by applicable laws or regulations in the locations where we operate.

EC-Council is dedicated to working with and providing reasonable accommodations to individuals with disabilities. If you have a medical condition or disability that limits your ability to complete any part of the application process and require reasonable accommodation, please contact us at [e-mail] and let us know how we can assist.

To be eligible for this position, candidates must be able to provide proof that they are either a citizen of the country or have legal authorization to work in the country where the position is posted and are currently residing there. EC-Council does not offer employment to ineligible candidates and reserves the right to revoke employment in case the candidate loses the authorization to work.

If, as part of the recruitment process, you are required to complete or submit any form of work, project, case study, or assignment, please note that such material will be considered the exclusive property of EC-Council. By submitting such work, you acknowledge that EC-Council retains all rights, title, and interest in the submitted content, including any intellectual property contained therein.

Candidates further waive any intellectual property or moral rights in such submissions, confirm that the work is original and free of third‑party infringement, and acknowledge that it is provided solely for evaluation purposes, with no ownership or other rights retained.

Our Privacy Policy outlines how we collect, use, store, and protect your personal data during the recruitment process. This may include information such as your name, contact details, employment history, qualifications, and any other details you provide as part of your application. All data is handled in compliance with applicable data protection and privacy regulations.

Please review our policy here: EC-Council Privacy Policy – User and Company | EC-Council. Submission of your application will be considered as your acceptance of the terms stated above.

EC-Council | Cyber Security Courses Online | Cybersecurity Training

Enroll in the best cyber security courses online by EC-Council. Boost your career with one of the top cybersecurity training programs. Get certified now!* Assist in monitoring and analysing cyber threat intelligence data from various sources.