IT Security Operations Lead

Job Summary

The Security Operations Lead is responsible for leading security operations, incident response, and the overall security posture of the account. This role serves as the senior security authority, ensuring effective threat detection, incident management, vulnerability remediation, and security risk reporting.

Key Responsibilities

• Lead security monitoring strategy, including detection coverage, use case development, and tuning based on the threat model.
• Command security incidents, direct containment and eradication activities, and manage client communications.
• Oversee the vulnerability management lifecycle and ensure timely remediation of identified vulnerabilities.
• Lead and prioritize the activities of Security Operations, Identity and Access Management (IAM), and Compliance analysts.
• Report security posture, incident trends, and residual risks to clients.
• Collaborate with the Governance and Compliance Manager to maintain a consistent security and compliance posture.
• Participate in the on-call rotation as the senior escalation point for security incidents.

Requirements

• Minimum 7 years of experience in security operations leadership and incident command.
• Strong knowledge of SOC processes, threat hunting, security architecture reviews, and incident response.
• Experience in vulnerability management, security risk assessment, and security posture reporting.
• Familiarity with SIEM platforms such as Splunk, IBM QRadar, or Microsoft Sentinel.
• Knowledge of SOAR, EDR, and the MITRE ATT&CK framework.
• Proven leadership and stakeholder management skills, with the ability to communicate security risks effectively to clients.
• CISSP, GCIH, or CEH certification is preferred but not mandatory.

Working Arrangement

Business hours with scheduled on-call standby.