Cyber Operations Lead

SysGroup is hiring a Cyber Operations Lead, based in Edinburgh, to head the day-to-day delivery of our cyber security managed services. This is the senior operational leadership role in the Cyber Security team under our 2026 operating model: you own the SOC service, lead the security engineers and analysts, and act as the escalation point for major security incidents across our client base.

This is a leadership and delivery role. You will run the operation, develop the people and own the service - including operational delivery of our Zscaler zero trust estate.

· Lead, coach and develop the cyber operations engineers and analysts - 1:1s, development plans, hiring and succession.

· Own capacity, shift and on-call planning for a 24/7 security service.

· Set and track the team's certification and capability plan against the SysGroup role framework.

· Own operational reporting: client-facing security reports, KPIs and continual service improvement.

· Own SOC/SIEM service delivery: detection coverage, use-case tuning, triage quality and shift handovers.

· Act as major incident lead for security events: containment, client communication and post-incident review.

· Own the vulnerability management lifecycle across managed clients: scan, triage, remediate, report.

· Set the standard for EDR and security tooling configuration, health and response playbooks.

· Own operational delivery of the Zscaler zero trust estate (ZIA/ZPA): onboarding, policy lifecycle, tuning and upgrades.

· Support Risk & Compliance engagements (ISO 27001, Cyber Essentials Plus) with operational evidence.