Security Operations Centre Manager

GC153: Cyber Security Operations Centre Manager
Location:  Remote / Exeter
Salary: Competitive Day Rate
Contract Length: 6-months
IR35:  In Scope

Overview:

First Military Recruitment are currently seeking a Cyber Security Operations Centre Manager on behalf of one of our clients.
Our client encourages applications from ex-military personnel however all candidates will be given due consideration.

Duties and Responsibilities:

• Define and lead the delivery of the Cyber Security Operations Centre (CSOC) to detect real-time cyber security incidents/data breaches and manage response and remediation activities, including the management of senior stakeholders and external agencies.
• Ensure adequate controls, practices and capabilities are in place to identify vulnerabilities across the estate and define the process for remediation or mitigation to ensure cyber readiness and resilience against attack.
• Providing strategic level advice to senior management regarding incident response, monitoring, logging and analysis of all relevant systems and processes.
• Leading the development, communication and continuous improvement of the cyber incident response plan Identification of and planning for the required levels of cyber investment within the CSOC to include governance, tooling and staffing.
• Defining and continuous development of a use case-driven logging, monitoring and response capability to ensure responsiveness and resilience to cyber security threats.
• Analysis of network traffic and behaviours; to evaluate the security environment and disseminate that information to other areas of the business.
• Defining the cyber security operations strategy in coordination with senior business and external stakeholders, this includes the management of the Cyber Security Operations Centre (CSOC) and processes in accordance with the threat posture and government direction.
• Knowledge of National Cyber Security Centre incident response and information security processes and policies.

Skills and Qualifications:

• Experienced SOC Manager.
• Strategic in nature.
• Effective in deploying resources.
• Demonstrated ability to lead and manage a team.
• In-depth knowledge of incident management processes.
• Proven experience delivering an effective security monitoring capability.
• Proven experience delivering threat intelligence and assessment.
• Proven experience operating cyber security solutions and tools.
• Demonstrated experience in managing relationships with external vendors, managed security service providers (MSSPs), and technology partners.
• Experience in the management of security event monitoring and operational response by means of monitoring and correlation tooling, antivirus, network and host IDS/IPS monitoring and logging.
• Knowledge of Cyber security regulations and industry framework e.g. GDPR, Network & Information Systems (NIS) regulations, NCSC, ITIL, Mitre ATT & CK.
• Familiar with threat monitoring, intelligence gathering, processes to scan for vulnerabilities and implementing fixes & mitigations.
• Incident response management.

Desirable:

• CISSP, CISM or equivalent professional cybersecurity certification.
• Experience with Cloud Security (AWS, Azure).
• ITIL Foundation (or equivalent) service management qualification.