Job Description

SOC Manager / Security Operations Manager

York/Bristol/London

Job Summary

The SOC Manager is responsible for the overall delivery, governance, and continuous improvement of Security Operations Centre (SOC) services across enterprise environments. The role combines technical leadership, people management, cyber defence strategy, stakeholder engagement, service delivery, and business growth responsibilities.

The position leads security monitoring, incident response, security tooling, compliance initiatives, and operational resilience programmes while ensuring alignment with business and customer objectives.

Key Responsibilities

Security Operations & Incident Management

• Own incident response, escalation management, and major security incident coordination.
• Drive continuous improvement of detection and response capabilities.
• Ensure SLA, KPI, and service commitments are consistently achieved.

Security Engineering & Technology Leadership

• Provide strategic oversight for SIEM, EDR, DLP, Email Security, Cloud Security, and Security Validation platforms.
• Lead onboarding of new log sources and security technologies.
• Support implementation and optimisation of security controls and monitoring capabilities.

Stakeholder & Customer Management

• Serve as the primary security operations contact for senior customer stakeholders.
• Conduct regular service reviews, governance meetings, and executive reporting.
• Translate technical risks into business-focused recommendations.
• Maintain strong relationships with business, technology, risk, and audit teams.

Leadership & People Management

• Lead, mentor, and develop SOC analysts and security engineers.
• Manage performance, capability development, and succession planning.
• Promote a high-performance and collaborative team culture.
• Drive certification and technical upskilling initiatives across the team.

Governance, Risk & Compliance

• Ensure compliance with audit, regulatory, and security policy requirements.
• Support internal and external audits through evidence collection and control validation.
• Track risks, actions, and remediation activities through governance forums.
• Drive security maturity improvement programmes.

Required Skills & Experience

Technical

• SIEM Platforms (Splunk, Microsoft Sentinel)
• EDR/XDR (CrowdStrike, Microsoft Defender)
• Email Security (Proofpoint)
• DLP Technologies (Proofpoint, Zscaler)
• Cloud Security (AWS, Wiz, Defender for Cloud)
• BAS Platforms (SafeBreach)
• Threat Hunting & Detection Engineering
• Incident Response & Security Operations

Leadership

• Team leadership and people development
• Service delivery management
• Executive stakeholder engagement
• Vendor and customer management
• Budget and commercial awareness
• Security governance and reporting

Preferred Qualifications

• Experience managing enterprise SOC services
• Experience leading security transformation and maturity initiatives
• Strong understanding of NIST CSF, ISO 27001, MITRE ATT&CK and Cyber Defence frameworks

Role Alignment

This job description aligns with Cyber Security Manager, SOC Manager, or Security Operations Lead roles within large enterprise and managed security service environments.

͏

͏

͏

͏