SOC Manager

Grupo Brisa; Oeiras; Presencial; EUR 70 000 - 90 000; Tempo integral

Resumo da oferta

Brisa Group is seeking a highly skilled SOC Manager to join our Technology team. The role focuses on Security Operations, Vulnerability & Patch Management, and Incident Response & Recovery, ensuring effective security services and rapid threat handling.

You will drive continuous improvement, detect and respond to cyber threats, and communicate risk and status to senior stakeholders in a complex technology environment.

Qualificações

• Experience in operational cybersecurity across SOC, IR, VM, and PM.
• Leadership experience in security services in critical environments.
• Knowledge of NIST, ISO 27001, NIS2 and DORA frameworks.
• Ability to translate risks for executives and stakeholders.

Responsabilidades

• Lead quality and performance of Security Operations services.
• Oversee vulnerability and patch management processes.
• Coordinate security incident response and recovery.
• Govern security vendors, monitor SLAs and KPIs.
• Provide clear visibility of cyber risk to stakeholders.
• Drive continuous improvements across detection, response and patch cycles.
• Interface with technical teams, vendors, and senior leadership.

Conhecimentos

SOC management

Incident response

Vulnerability management

Patch management

Executive communication

Security operations

Vendor management

Risk awareness

Formação académica

Degree in Computer Engineering or related field

Cybersecurity background

Descrição da oferta de emprego

Brisa Group is looking for a highly skilled SOC Manager to join our Technology team. This is an opportunity to play a key role in ensuring the security, resilience, and continuous evolution of our cybersecurity operations, with a strong focus on Security Operations, Vulnerability & Patch Management, and Incident Response & Recovery.

You will help ensure the effectiveness of critical security services, drive continuous improvement, and strengthen the organisation’s ability to detect, respond to, and recover from cyber threats across a complex and business-critical technology environment.

Being part of our team means working in a Group of innovative companies with a focus on sustainability and a vision for the future. It means working in a Group that cares about people, their development and well-being, as we are proudly certified as Empresa Familiarmente Responsável. Our Culture is guided by the following values: ethics, innovation, excellence and people.

Main responsibilities

• Lead the quality, performance, and continuous improvement of Security Operations (SOC) services, including continuous monitoring, threat detection, and response;
• Ensure the effectiveness of Vulnerability Management and Patch Management processes, driving the timely remediation of critical vulnerabilities;
• Coordinate and oversee security incident response and recovery, ensuring a structured and effective approach to critical incidentes;
• Lead the governance of security vendors and partners, monitoring SLAs, KPIs, service performance, and contractual requirements;
• Monitor cybersecurity risk exposure and provide clear, consolidated visibility to key stakeholders;
• Drive continuous improvement across detection, response, patching, recovery, and vulnerability management processes;
• Act as a key interface between technical teams, vendors, partners, and senior leadership, ensuring alignment and effective decision-making;
• Support the definition and evolution of the Security Operations & Incident Management strategy, aligned with business objectives and regulatory requirements.

Experience, Skills and Qualifications

• Degree in Computer Engineering, Information Technology, Cybersecurity or a related field;
• Experience in operational cybersecurity, particularly across SOC, Incident Response, Vulnerability Management, and Patch Management;
• Experience in security service leadership or management, preferably within business-critical environments;
• Strong knowledge of cybersecurity frameworks, standards, and best practices, such as NIST, ISO 27001, NIS2, and DORA;
• Proven experience in security vendor and service management, including SLA and KPI definition and oversight;
• Strong crisis management, decision-making, and coordination skills, particularly in high-pressure situations;
• Excellent technical and executive communication skills, with the ability to translate technical risks and issues into clear business-level information;
• Ability to operate effectively in a complex, dynamic, and multi-stakeholder environment;
• Good command of English, both written and spoken.