Security Operations Manager - Assistant Vice President

Icapital, Llc; Lisboa; Presencial; EUR 90 000 - 130 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health insurance

Equity

Annual bonus

PTO

Resumo da oferta

iCapital is seeking a Security Operations Manager (AVP) to lead the Global Information Security SOC in Lisbon, Portugal. You will guide daily monitoring, triage, and incident response, while mentoring a team of SOC analysts.

You will partner across Threat Detection Engineering, Cloud Security, and Incident Response to strengthen cyber resiliency. The role emphasizes people management, runbooks, escalation, and alignment with case-driven priorities.

Qualificações

• 5-8 years of experience in security operations and SOC functions.
• Experience leading or managing a SOC or security-ops team.
• Hands-on SIEM/SOAR setup and operational management.
• Knowledge of NIST and MITRE ATT&CK frameworks.
• Proficiency with Linux, Windows and macOS.
• Experience with cloud infrastructure, AWS preferred.

Responsabilidades

• Manage day-to-day SOC operations including monitoring, alerting, triage, and incident response.
• Lead, mentor, and develop SOC analysts; manage scheduling, on-call coverage, and onboarding.
• Create and maintain runbooks, playbooks, and incident procedures; daily/weekly/monthly checklists.
• Operate and tune SIEM and SOAR platforms; maintain dashboards and alerts.
• Triage incidents, set priorities, and coordinate with other teams.
• Collaborate with Cyber Case Manager to flow incidents into case management.
• Coordinate with Threat Detection Engineering, Cloud Security, and Incident Response teams.
• Measure and report on cyber defenses and operational metrics to leadership.
• Serve as escalation point for high-severity incidents outside business hours as needed.
• Drive evaluation, selection, and configuration of key security tools.

Conhecimentos

SOC management

People leadership

Incident response

SIEM management

Threat detection coordination

English proficiency

Cross-team collaboration

Analytical skills

Ferramentas

Splunk

SOAR

AWS

Descrição da oferta de emprego

Security Operations Manager - Assistant Vice President

About the Role

iCapital is looking to hire a SOC Manager to join its Global Information Security team, based in Lisbon, Portugal. This role manages the day-to-day operations of the Security Operations Center (SOC) and leads the team of analysts who monitor, triage, and respond to security alerts. The SOC Manager provides situational awareness through detecting, containing, and resolving cyber security threats using a comprehensive set of technologies including IDS, IPS, DLP, SIEM, SOAR, AWS, SaaS Security, and firewall technologies.

This is a people-management role focused on keeping the SOC running smoothly - coverage, runbooks, triage, and escalation - while developing the analyst team. The SOC Manager works closely with the Cyber Case Manager to ensure incidents flow into case management and are tracked through to closure, and partners with Threat Detection Engineering, Cloud Security, Incident Response, and other Information Security teams to strengthen the firm’s overall cyber resiliency. Based in Lisbon, the role helps provide security operations coverage across global time zones. This role reports to the Security Operations Leader.

Responsibilities

• Manage the day-to-day operations of the Security Operations Center, ensuring monitoring, alerting, triage, and incident response run effectively across the operating day.
• Lead, mentor, and develop a team of SOC analysts – including scheduling, shift and on-call coverage, performance management, hiring, and onboarding.
• Establish and maintain runbooks, playbooks, incident-handling procedures, and daily, weekly, and monthly security checklists.
• Operate, tune, and manage the SIEM and SOAR platforms; maintain alerts and dashboards that surface key security events and provide security assurance.
• Triage and elevate incidents quickly and effectively, setting priorities for the SOC team and coordinating response with other teams across the firm.
• Partner closely with the Cyber Case Manager to ensure incidents flow into case management and are tracked to closure, and to keep the team aligned to case-driven priorities.
• Work alongside Threat Detection Engineering, Cloud Security, Incident Response, and other Information Security teams to improve the firm’s security posture.
• Measure and report on the state of the firm’s cyber security defenses, including operational metrics and regular reporting to leadership.
• Serve as an escalation point for high-severity incidents, including outside standard business hours as needed.
• Drive the evaluation, selection, and configuration of key security tools to enhance Cyber Security Operations.

Qualifications

• 5-8 years of experience in security operations, including 1-3 years leading or managing a SOC or security operations team.
• Demonstrated people-management experience – leading, mentoring, scheduling, and developing analysts.
• Hands-on experience with the setup and management of a SIEM, preferably Splunk.
• Experience with SOAR and a strong understanding of the incident-response lifecycle and frameworks such as NIST and MITRE ATT&CK.
• Knowledge of Linux, Windows, and macOS operating systems.
• Experience with cloud infrastructure, AWS preferred.
• Strong coordination and stakeholder-management skills, with the ability to liaise across teams and report to leadership.
• Professional fluency in English to support a global team.
• Attentive, organized, and detail-oriented, with solid problem-solving and analytical skills.
• Excellent written and verbal communication skills..

We believe the best ideas and innovation happen when we are together. Employees in this role will work in the office four days, with the flexibility to work remotely one day (Friday).

iCapital offers a comprehensive benefits package that includes a total compensation program consisting of competitive salary, annual performance bonus, and equity for all full-time employees; healthcare with 100% employer-paid health and dental insurance; and generous paid time off (PTO).

iCapital offers qualified investors access to a curated menu of strategies across the private equity life cycle. Investors and their advisors can choose from diversified and niche private equity strategies, including venture capital, growth equity, middle-market buyout, and secondaries.