London Croydon (hybrid) · FCA & DORA-regulated global financial services firm
Up to £130 + 25% Bonus, 30 Days Holiday, 15% Pension, Full Health Care +
This is an operational leadership role involving ownership of a follow-the-sun, 24×7 SOCaross EMEA where you will be the tasked with overall coordinating, escalating and resolving major incidents. This is a Hybrid model with advanced in-house teams plus third-party SOC & MDR providers you'll hold to accountability.
- Microsoft-native security operations
- Sentinel (SIEM), Defender XDR, KQL-led detection engineering
- Logic Apps automationMulti-cloud (Azure + AWS), cloud-native, policy-as-code
- FCA / PRA-regulated, DORA and audit readiness and control assurance are essential.
ROLE PROFILE & ACCOUNTABILITIES
- Major incident command – coordination, escalation and resolution under real pressure.
- Third-party SOC / MDR governance – performance, SLAs and genuine acco untability
- Operational governance – reporting, audit readiness, control assurance
- Developing the team, embedding leadership qualities
- Uplifting the operational rigour of the whole function
The ideal candidate will have led security operations at scale, including SOC and incident response Run major cyber incidents for real this isn't a role for someone who is sat sat on the bridge.
- Driven operational performance through metrics, reporting and structured governance
- Managed outsourced or third-party security services in a regulated environment
- Led and developed teams across multiple locations, and stayed decisive under pressure
