> Markdown version of [/jobs/ext/4492235-it-security-operations-lead](https://www.wearedevelopers.com/jobs/ext/4492235-it-security-operations-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Security Operations Lead - **Company:** Buckinghamshire Council - **Location:** Aylesbury, UK - **Experience:** Expert - **Salary:** £67,493.0 - £70,954.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Information Security Management, Intrusion Detection and Prevention, Security Information and Event Management, Mitre Att&ck, Security Orchestration, Automation & Response - **Published:** November 2, 2026 - **Apply:** https://jobs.buckinghamshire.gov.uk/apply/?jobId=QQPFK026203F3VBQBV7V779XA-344628&langCode=en_GB ## About the Role As an 'any-desk' worker, you'll need a desk, screen a keyboard to get your job done. You'll need to be connected to our network to access digital folders and resources, but this can either be from home or an office location when required. You will be required to work from the office a couple of times a week, depending on your role and team requirements., We're looking for an experienced cyber security professional who is both technically strong and highly collaborative. You'll be someone who enjoys solving complex challenges, keeps pace with emerging threats and technologies, and can confidently translate technical information into meaningful insights for a range of audiences. You'll be a natural relationship-builder who can influence stakeholders, lead improvements and drive positive outcomes across teams. To be successful in this role, you'll bring significant experience within cyber security operations, particularly in threat detection, monitoring, incident response and security assurance within complex IT environments. You'll have a strong understanding of recognised security frameworks and best practices, with the credibility and expertise to act as a trusted subject matter expert. Experience managing security technologies, leading service improvements and working with both internal and external partners will be essential. You'll ideally hold a degree in Cyber Security (or equivalent experience) alongside recognised industry certifications such as CISSP or CISM and ITIL Foundation. Most importantly, you'll be proactive, resilient and committed to continuous improvement, with a passion for protecting services and helping the organisation stay ahead of emerging cyber risks. For full details of the knowledge, skills, experience and qualifications required, please refer to the Job Description. ## Description This is an exciting opportunity to take ownership of a critical area of cyber security and make a real impact across the organisation. Working closely with our Security Operations Centre (SOC), IT teams, partners and suppliers, you'll lead the delivery of our security monitoring, threat detection and incident response capabilities, helping ensure we remain resilient against an ever-evolving cyber threat landscape. No two days are likely to be the same. You'll be involved in everything from overseeing cyber incident response and analysing security events, to improving security tooling, embedding best-practice frameworks and helping shape our long-term cyber security strategy. You'll play a key role in driving continuous improvement, ensuring we have the right people, processes and technology in place to respond effectively when threats arise The role offers the opportunity to work with industry-leading frameworks and technologies such as NIST, MITRE ATT&CK, SIEM, SOAR and EDR platforms, while collaborating with stakeholders across the organisation to strengthen our overall security posture. Whether you're influencing strategic decisions, leading improvement initiatives or responding to emerging security challenges, your expertise will help safeguard essential services and support our ambitious digital future. Key Responsibilities * Lead and develop cyber security detection and response capabilities. * Oversee cyber incident management, investigation and threat mitigation activities. * Drive continuous improvement across security tools, processes and controls. * Provide expert advice, assurance and reporting to key stakeholders and governance groups.