Overseeing 24×7 SOC operations, ensuring effective security monitoring, timely alert triage, and appropriate escalation of potential cybersecurity incidents providing leadership and operational governance across the SOC.
- Manage and continuously improve SOC operational capabilities across in-house and outsourced resources to ensure effective 24×7 monitoring, alert triage, escalation, and operational support.
- Lead day-to-day SOC operations, ensuring cybersecurity alerts are identified, assessed, prioritised, investigated, and escalated appropriately based on severity, risk, asset criticality, and business impact.
- Oversee SOC service performance, including shift coverage, operational discipline, service quality, SLA fulfilment, analyst performance, and escalation effectiveness.
- Establish and maintain SOC processes, procedures, investigation playbooks, shift handover practices, escalation criteria, and operational workflows.
- Monitor SOC KPIs and operational trends, identify gaps, and drive improvements in monitoring effectiveness, alert quality, response time, and analyst productivity.
- Bachelor's Degree or professional qualification in Information Technology
- Cybersecurity
- Computer Science
- Information Security
- Nice to have: CISSP