Security Operations Manager

**The Opportunity**
An exciting opportunity for an aspiring Cyber Security professional as this European services business is looking to expand its Security capability by recruiting a Security Operations Manager.
**The Role**
Reporting to the Head of Technical Operations, you will be be part of a small team managing a hybrid, Security Operations Centre (SOC). As a member of the Group Information Security team, with the responsibility of managing the state of security controls acrossthe Group. You will take a lead from the Group Technical Security team, to ensure that the technical security controls in place are protecting the business from cyber risks. You will help drive efficiency from these controls in both their deployment but alsotheir day-to-day management. In addition, you will to support the validation of security controls within the business operations across Group IT that will help provide input of the effective manage of technical security controls.
The Security Operations Manager will work with other senior stakeholders and external parties to ensure that the company demonstrates that the business has consistent adequate controls and compliance to manage risk. Specifically you will:

- Ensure the day to day running of IT security on the Group estate are correctly functioning and acts as an adequate technical security control
- Ensure that IT security controls in place on the Group estate are being correctly managed and that those managing them are competent
- Work with outsourced security suppliers to help manage such security services that are not provided in-house
- Working with the Head of Security Operations, define and implement a KPI framework that can be used to measure effectiveness of controls - and provide regular reporting on this
- Support the running and provision of vulnerability assessments and management services to the business and support the development of mitigation projects, as necessary.
- Support the maturity and operations of the Security Operations Centre (SOC).
- Support the running of monitoring systems for intrusion detection and prevention; will often act as the first line of incident response/escalation.
- To investigate suspected and actual security incidents in accordance with the security incident management standard, produce reports with recommendations and ensure any remedial action is taken.
- Manage the Security Information and Event Management system (SIEM) and other security systems ensuring appropriate actions are taken for all issues flagged for action by the system.
- Auditing of identity and access control systems.
- Lead the drive and support the implementation of a zero-trust identity framework including Multifactor authentication, Privilege Identity Management (PIM), Conditional Access.
- Lead the drive and also support the implementation of Endpoint security solutions across the Group.
- Work with the operational teams to support incident response resolutions.
- Develop strong working relationships across all Business functions and its supplier base
- Understand and drive vendor relationship for Cyber Security products or services that are in production
- Assess the security impact of any changes to the UK service.
- Work with UK and Europe business IT functions to coordinate remediation activities and work in partnership to implement technical controls that reduce risk across the group business.
- Support the IT Security elements of Group’s move towards cloud-based solutions
- Report any live UK services security concerns to the Security Operations Manager and the Head of Technical Security
- When required, support cyber breach response out of hours.

**The Requirements**
With c. 5 years' technical security experience, having ideally worked in a SOC environment, you will possess:

- A strong background in technical services and understanding of technical security controls
- Experience of managing security testing requirements
- A strong understanding of the diverse technology in place in within IT Services
- Knowledge of all areas of IT Security, including Cyber Security for Digital technologies; Identity and Access management; Anti-virus, such as MS Defender, Authentication and Single Sign On; Authorization; Audit; Secure communications and cryptographic services;Network protection, SIEM technologies, Web proxy and Office365.
- Excellent written and verbal communication and presentation skills, particularly adept at simplifying and articulating complex topics and employing a wide range of communication styles to engage with all levels of the organization
- Respect individual's views and positively encourages and contributes to a learning environment in which individuals are supported to develop to their full potential and excel in role
- Be capable of establishing and maintaining effective working relationships, being able to influence with key stakeholders based on professional credibility and excellent communication and engagement

This role is likely to suit an experienced SOC Analyst looking to make that step up. Any security qualifications will be beneficial.