Manager, Cyber Operations

Our Clients; Taguig; On-site; PHP 1,800,000 - 2,600,000; Full time

Job summary

Our Clients in Manila seeks a Manager, Cyber Operations – APAC to lead the regional SOC, translate global strategy into APAC execution, and ensure 24/7 service delivery meets SLAs and KPIs. You will guide SOC Team Leaders and analysts, shaping incident response and capability growth across the region.

This hands-on leadership role emphasizes people development, global alignment with EMEA and North America, and advancing AI-driven automation.

Qualifications

• Significant experience leading SOC operations in a 24/7 environment.
• Proven people management across multiple shifts or locations.

Responsibilities

• Lead day-to-day SOC operations across APAC, ensuring service quality and delivery against SLAs and KPIs.
• Escalate risks and resource constraints to regional leaders.
• Implement global SOC strategy with APAC-specific processes and governance.
• Develop Manila as a resilient service delivery location per location strategy.

Skills

SOC leadership

People management

Incident detection & response

SIEM knowledge

EDR/XDR know-how

Global collaboration

Tools

SIEM

EDR/XDR

Job description

Role Overview

The Manager, Cyber Operations – APAC is responsible for the day-to-day operation, performance, and continued development of Security Operations Centre (SOC) capabilities across the APAC region, with scope to support additional cyber operations services as service lines expand.

Reporting to the Director of Global Security Operations, this role translates global SOC strategy into consistent regional execution, ensuring 24/7 service delivery aligns with global standards, processes, service-level agreements (SLAs), and key performance indicators (KPIs).

This is a hands-on operational leadership role responsible for leading SOC Team Leaders and analysts, maintaining service quality, supporting regional capability growth, and collaborating with global SOC leadership and peers across EMEA and North America. The role also contributes to global improvement initiatives involving standardization, automation, and AI adoption, while remaining accountable for effective people leadership and reliable operational delivery across APAC.

Key Responsibilities

Regional SOC Operations

• Lead the day-to-day operations of SOC teams across APAC, with primary responsibility for service quality, operational performance, and delivery against global SLAs and KPIs.
• Act as the senior regional operational leader for SOC activities, escalating material risks, service issues, and resource constraints to the Director of Global Security Operations.
• Implement the global SOC strategy across APAC through consistent processes, technologies, playbooks, governance, and reporting.
• Support the continued development of Manila as a resilient and scalable service delivery location, in alignment with the established global location strategy.

Operational Excellence

• Maintain high standards across incident detection, triage, response, escalation, and reporting.
• Monitor SOC queues, capacity, workloads, shift coverage, and service performance, taking corrective action where necessary.
• Coordinate 24/7 operational coverage and ensure effective shift handovers, escalation routes, and management support arrangements.
• Serve as an operational escalation point for complex or high-severity incidents across APAC, coordinating with appropriate global teams.
• Drive practical continuous improvement through root cause analysis, lessons learned, shift reviews, and agreed operational maturity initiatives.

People Leadership and Capability Development

• Lead, coach, and develop SOC Team Leaders and analysts by establishing clear objectives, conducting regular performance discussions, and actively supporting succession planning.
• Coordinate training and capability development to ensure analysts can meet current and future service requirements.
• Support recruitment, onboarding, retention, and workforce planning for the Manila SOC in partnership with the Director of Global Security Operations and relevant support functions.
• Foster an inclusive, accountable, and high-performing team culture aligned with organizational values and ways of working.

Global Alignment and Collaboration

• Work directly with the Director of Global Security Operations and SOC leaders across EMEA and North America to maintain global coordination, consistent service delivery, and seamless operational coverage.
• Contribute operational insights to the global SOC roadmap, standards, and improvement priorities while retaining accountability for regional implementation.
• Collaborate with Customer Success, Incident Response, Detection Engineering, Security Engineering, and Capability Development teams to resolve operational issues and improve customer outcomes.
• Support customer engagements, service reviews, and escalations when senior operational representation is required.

Innovation, AI, and Automation

• Support the regional rollout and adoption of globally approved AI, automation, and workflow improvements.
• Identify operational use cases that can improve consistency, investigation quality, analyst capacity, and incident response times.
• Coordinate regional pilots and provide feedback, ensuring changes are controlled, measurable, and aligned with the global technology roadmap.

Performance Management and Reporting

• Manage APAC operational performance against agreed measures covering quality, timeliness, accuracy, productivity, capacity, and customer outcomes.
• Provide regular operational reporting, forecasts, risk updates, and performance insights directly to the Director of Global Security Operations.
• Ensure clear ownership and follow-through for service improvement actions, audit findings, and operational readiness requirements.

Qualifications

Essential Requirements

• Significant experience in Security Operations Centre (SOC) operations, including leadership of teams within a 24/7 operating environment.
• Proven people management experience, ideally leading SOC Team Leaders and analysts across multiple shifts or locations.
• Strong operational understanding of incident detection, triage, response, escalation, service management, and SOC performance metrics.
• Working knowledge of Security Information and Event Management (SIEM) and Endpoint Detection and Response (EDR) / Extended Detection and Response (XDR) technologies, with the ability to support senior analysts and operational decision-making.
• Experience implementing standardized processes, playbooks, and governance within a changing operational environment.
• Ability to work effectively across different geographies and cultures within a global matrix organization.
• Clear and credible communication skills, including the ability to provide concise operational updates, escalating risks, and influence stakeholders.

Desirable Qualifications and Experience

• Experience working within a global Managed Security Services Provider (MSSP), a Managed Detection and Response (MDR) service, or a comparable cyber operations environment.
• Experience supporting the growth or development of an offshore or regional service delivery location, particularly in Manila or the wider APAC region.
• Familiarity with AI and automation use cases within security operations.
• Relevant qualifications in cybersecurity, service management, or leadership.