Operational and Cyber Resilience Manager in England

Our client is seeking a Cyber Operations Manager to lead the day-to-day operation of its cyber security function while driving the ongoing development of security operations, detection and response capabilities. This is a technical leadership role with a 50/50 split between people management and hands-on cyber security operations. The position has been created following a team restructure, with the objective of increasing the organisation's technical cyber security capability through the appointment of a strong technical team leader.

The Cyber Operations Manager will be responsible for leading a team of three Cyber Security Analysts and will act as a senior technical escalation point across cyber security operations.

Key Responsibilities

• Security Operations Leadership
  • Lead and manage the day-to-day cyber security operations function.
  • Provide leadership, coaching and development to a team of three Cyber Security Analysts.
  • Act as a technical escalation point for security incidents and operational challenges.
  • Manage team priorities and workloads.
  • Drive continuous improvement of cyber security operations capabilities.
• Incident Response & Cyber Defence
  • Lead cyber security incident investigations.
  • Coordinate containment, eradication and recovery activities during security incidents.
  • Support the development and maintenance of incident response procedures and playbooks.
  • Remain effective in high-pressure operational situations.
• Security Monitoring & Detection
  • Support and improve security monitoring and detection capabilities.
  • Develop and enhance detection rules and operational security controls.
  • Utilise threat intelligence and threat hunting techniques to improve detection and response capabilities.
  • Contribute to ongoing improvements in security operations effectiveness.
• Vulnerability & Security Operations Management
  • Support vulnerability management activities and drive timely remediation of identified risks.
  • Work with internal technology teams to improve operational security outcomes.
  • Support the ongoing enhancement of security tooling and cyber defence capabilities.
• Vendor & Stakeholder Management
  • Manage relationships with outsourced security providers and security partners.
  • Hold suppliers accountable for agreed service delivery.
  • Work collaboratively with internal IT teams and Risk & Compliance stakeholders.
  • Communicate technical risks and cyber security issues to both technical and non-technical audiences.
  • Embed cyber security considerations into technology projects and operational initiatives.

Essential Experience & Skills

Applicants should be able to demonstrate:

• At least 5 years' relevant cyber security experience.
• Experience working within a regulated environment such as legal services, professional services, or financial services.
• Experience leading cyber security operations teams.
• Experience coaching, developing and managing cyber security professionals.
• Strong incident response experience.
• Experience leading cyber security investigations and recovery activities.
• Technical expertise across Microsoft Azure, Microsoft Entra ID, SIEM technologies, detection engineering, endpoint security, email security, Identity and Access Management (IAM), vulnerability management, network security, and SASE technologies.
• Experience improving operational cyber security capabilities.
• Experience developing detection rules and response playbooks.
• Experience using threat intelligence and threat hunting techniques.
• Experience managing outsourced security providers.
• Strong stakeholder management and communication skills.
• Ability to communicate technical concepts and risks to non-technical stakeholders.

Desirable Experience

The following experience would be advantageous:

• Experience within a global law firm environment.
• Experience transforming or maturing security operations functions.
• Experience working with managed SOC services.
• Experience with security automation initiatives.
• Experience participating in or supporting purple team activities.
• Experience enhancing cyber security operations through process and capability improvements.

Qualifications

The following qualifications are desirable:

• CISSP
• CISM
• GIAC
• Equivalent demonstrable experience will also be considered.

Team Structure

Reports into: Head of Department
Direct Reports: 3 Cyber Security Analysts
Management / Hands-on Split: 50% Leadership / 50% Technical

What This Role Is

• Cyber Operations Manager
• Security Operations Manager
• SOC Leadership role
• Technical Cyber Security Team Leader
• Incident Response & Security Operations leadership position

What This Role Is Not

• Governance, Risk & Compliance (GRC) Manager
• Information Security Governance role
• IT Audit role
• Compliance-focused security position
• Policy-only Information Security role

Morgan Hunt is a multi-award-winning recruitment business for interim, contract and temporary recruitment and acts as an Employment Agency in relation to permanent vacancies. Morgan Hunt is an equal opportunities employer. Job suitability is assessed on merit in accordance with the individual's skills, qualifications and abilities to perform the relevant duties required in a particular role.