Cyber Security Operations Manager

Cyber Security Operations Manager

📍 Hybrid – Liverpool (2–3 days onsite)

💰 Salary: Up to £75,000

Overview

An organisation undergoing continued growth is seeking a Cyber Security Operations Manager to lead its security operations capability.

This role is responsible for overseeing security operations, including monitoring, incident response, and vulnerability management, ensuring the organisation maintains a strong and resilient security posture.

You will work closely with internal technology teams and external partners to ensure effective protection across systems, infrastructure, and cloud environments.

Responsibilities

• Lead the day-to-day delivery of security operations
• Act as the primary contact for external SOC providers, ensuring effective monitoring and response
• Manage and develop a team of security analysts and engineers
• Oversee security tooling including SIEM, SOAR, EDR/XDR, and threat intelligence platforms
• Own the end-to-end incident response process, including post-incident reviews
• Coordinate responses to major incidents across technical and business teams
• Develop and maintain operational processes, playbooks, and procedures
• Lead the vulnerability management programme, ensuring risks are identified and remediated
• Work with stakeholders to ensure timely patching and remediation activities
• Improve detection capability through tuning and optimisation of alerts and rules
• Support automation initiatives to enhance operational efficiency
• Ensure security coverage across cloud, on-premise, endpoint, and network environments
• Provide reporting on operational performance, risks, and security metrics
• Support internal audits and compliance activities
• Promote continuous improvement and strong security practices across teams

Key Requirements

• Experience leading or managing a security operations or SOC function
• Strong understanding of security tooling (SIEM, SOAR, EDR/XDR, IDS/IPS)
• Experience in incident response and threat management
• Exposure to cloud environments (e.g. Azure, AWS, or GCP)
• Understanding of security frameworks (e.g. NIST, ISO 27001, CIS)
• Strong communication and stakeholder management skills
• Experience leading and developing technical teams

Desirable

• Relevant certifications (e.g. CISSP, CISM, GIAC, cloud security certifications)
• Experience in regulated or complex environments
• Exposure to threat hunting, forensics, or red/purple teaming
• Experience improving or implementing security automation