Cyber Security Operations Manager

- Lead and manage the daily operations of the internal Security Operations team and any outsourced SOC solution to ensure 24/7 monitoring and response coverage. - Oversee cyber defence capabilities including SIEM, SOAR, EDR/XDR, threat intelligence, and identity protection. - Develop and maintain operational procedures, playbooks, and response frameworks. - Direct the full incident response lifecycle: detection, triage, containment, eradication, recovery, and post-incident review. - Coordinate major incident management with IT Infrastructure, Cloud, and Business teams. - Ensure lessons learned are captured and drive meaningful improvement. - Oversee the vulnerability management programme, ensuring timely identification, prioritisation, and remediation of risks. - Partner with asset owners to ensure patches, configuration hardening, and remediation actions are completed. - Support risk assessment processes and provide input to security governance and compliance teams. - Ensure the design, tuning, and optimisation of detection rules, alerts, and correlation logic across security platforms. - Drive automation initiatives using SOAR to improve response speed and reduce operational workload. - Maintain robust coverage across cloud, on-premise, network, and endpoint environments. - Build capability through training, certifications, and knowledge-sharing programmes. - Communicate risks, incidents, and security posture with technology, business, and leadership teams. - Support audits, regulatory assessments, and customer assurance activities.