Security Operations Manager

Role overview

Work arrangement

• Location is negotiable among Norwich, Tewkesbury, and Exeter.
• The role is full time with agile working.
• The description does not explicitly define the workplace as onsite, hybrid, or remote.

Responsibilities

• Lead and develop a team of Cyber Security Engineers.
• Manage security monitoring, detection, investigation, and response to threats.
• Own security incidents from identification through response and recovery.
• Oversee vulnerability identification, prioritisation, and remediation.
• Manage external SOC and MDR providers.
• Maintain playbooks, procedures, metrics, and reporting.
• Partner with Infrastructure, IT Operations, and Security Assurance teams.
• Support risk, compliance, policy, and security maturity initiatives.
• Monitor the threat landscape and strengthen organisational resilience.

Essential experience

• Experience managing a security operations function and/or cyber security team.
• Hands-on experience investigating and managing security incidents.
• Experience with threat hunting, vulnerability management, and security monitoring.
• Experience developing security playbooks, procedures, and operational processes.
• Strong stakeholder management and communication skills.
• Experience working with third-party SOC or MDR providers.

Technical expertise

• Strong experience with Microsoft Entra ID, Microsoft Intune, Microsoft Defender, and Microsoft Sentinel.
• Technical credibility to support investigations and guide improvements across security operations.

Qualifications

• CISSP or an equivalent recognised cyber security qualification.

Benefits

• Competitive salary.
• Family-friendly policies.
• Health and wellbeing support.
• Benefit details depend on office location.