Cyber Security Operations Manager, CISSP, CISM, SOC, City of London

The Cyber Operations Manager provides technical leadership across security operations and works closely with Infrastructure, Business Systems, Service Delivery, Risk & Compliance and third-party security providers to ensure threats are identified, investigated and managed effectively.

• At least five years’ relevant cyber security experience in a regulated environment, such as legal, professional services or financial services. Global law firm experience is desirable, but not essential.
• Proven experience leading cyber security operations teams, including coaching and developing staff, managing priorities and providing technical escalation support.
• Strong incident response experience, with the ability to lead investigations, co-ordinate containment and recovery activities, and remain effective under pressure.
• Broad technical expertise across Microsoft Azure and Entra ID, SIEM and detection engineering, endpoint and email security, identity and access management, vulnerability management, network security and SASE technologies.
• Experience improving operational security, including developing detection rules and response playbooks, using threat intelligence and threat hunting, and driving timely vulnerability remediation.
• Experience managing outsourced security providers, holding suppliers accountable for service delivery and working collaboratively with internal IT and Risk & Compliance teams.
• Clear communication and stakeholder management skills, including explaining technical risks to non-technical audiences and embedding security into technology projects.
• Experience transforming security operations, working with managed SOC services, security automation or purple teaming would be advantageous.
• Relevant qualifications such as CISSP, CISM or GIAC or equivalent demonstrable experience are sought.