Head of SecOps

La Fosse is supporting a global organisation as it continues to evolve their internal security capability. Following a period of investment and change, theyre now looking for a Head of Security Operations to take ownership of the control stack, uplift operational maturity, and build out key programmes.

This is a hands-on leadership position responsible for the full security operations landscape, covering controls, detection, response, and assurance. Youll own the move from an external SOC to an in-house capability, acting as the internal MSSP and ensuring visibility across global environments.

Youll build and lead a team that designs and embeds effective controls, overhauls the VM programme, and establishes a formalised security testing lifecycle.

What youll be doing

• Oversee and mature the control stack across cloud and on-prem environments
• Lead the transition from an external SOC provider to an internal security operations function
• Design and implement a vulnerability management strategy from the ground up
• Build out the testing and assurance programme (youll manage the pentest lifecycle, not conduct the testing yourself)
• Introduce aggregation and reporting tools to enhance visibility and decision-making across controls
• Collaborate with the Risk function to align frameworks and reporting with regulatory expectations (DORA, NIS2 etc.)
• Drive a process-led culture prioritising governance, visibility, and accountability over pure tooling

What youll bring

• Experience building and/or running a SOC.
• A background in vulnerability management, security engineering, and operational controls
• Strong understanding of cloud environments and how to secure them
• Proven ability to create structure and maturity in growing or complex organisations
• Pragmatic and culturally aligned leadership style someone who builds trust and brings people with them

This role would suit someone who has built programmes and teams before, who enjoys creating clarity out of complexity, and who understands that good security is as much about process as it is about technology.