Job Description

As SOC Manager , you will lead and front end all Security Operations activity. You will manage the SOC function and take accountability for threat monitoring, incident response, tooling effectiveness, and operational security governance. You will also play a key role in advising on SOC Target Operating Model (TOM), team right sizing, and scaling strategy, ensuring the function is structured effectively for the organisation's risk profile.

• Lead and manage the Group SOC function, overseeing threat monitoring, investigation, containment, eradication, and recovery.
• Own and optimise SIEM operations, detection engineering, and alert triage models.
• Design and refine SOC shift structures, escalation frameworks, and operational workflows.
• Ensure security tooling is properly embedded and aligned to team capability and alert volumes.
• Integrate SOC processes effectively with ITSM platforms and broader IT operations.
• Ensure identity controls, access governance, and network segmentation controls are operationalised and monitored effectively.
• Manage third party security partners and define the appropriate balance between in house capability and partner support.
• Advise senior leadership on SOC operating model design, team structure, and scaling requirements.
• Engage senior stakeholders confidently, clearly articulating operational findings and defending security positions where required.

Most senior Security Operations leader within a large corporationIdeal for candidates currently operating at Head of SOC / Senior Mngr level

• Minimum 12 years of experience within Security Operations environments and a minimum 4-6 years in a formal SOC leadership or managerial role.
• Currently operating at Senior Manager or Head of Security Operations level within a complex enterprise environment.
• Proven experience building, structuring, and leading SOC teams.
• Strong hands-on experience implementing and optimising SIEM platforms.
• Deep understanding of detection engineering, alert modelling, and the incident response lifecycle.
• Demonstrated experience designing SOC shift models and escalation processes.
• Experience integrating security tooling with ITSM processes.
• Practical exposure to operationalising Zero Trust principles.
• Experience advising on SOC Target Operating Model (TOM) and team right sizing.
• Strong stakeholder engagement capability, including experience working alongside senior infrastructure and security leadership.
• Experience within an end-user enterprise environment is strongly preferred. A combination of enterprise and MSSP experience will be considered where enterprise exposure is substantial.

A well established enterprise strengthening its Security Operations capability and requires a senior operator to lead, optimise, and mature the SOC function.
This is a senior operational leadership mandate within a stable enterprise environment. The successful candidate will shape and mature existing Security Operations capability, define operating structures, and lead a critical function responsible for protecting the organisation's technology estate.

Skills Required