Cyber Operations Manager

I'm working with an international law firm at Bank who are looking for a Cyber Operations Manager to lead their security operations function. This is a senior, hands-on leadership role with real influence - you'll own the team, lead on incident response and drive the improvement agenda, working closely with IT and Risk & Compliance.

WHAT THE ROLE INVOLVES

• Leading, coaching and developing the cyber security operations team, managing priorities and acting as the technical escalation point
• Leading incident response - running investigations and co-ordinating containment and recovery
• Improving operational security through detection rules, response playbooks, threat intelligence and threat hunting
• Driving timely vulnerability remediation across the estate
• Managing outsourced security providers and holding them accountable for service delivery
• Explaining technical risk to non-technical audiences and embedding security into technology projects

WHAT THEY ARE LOOKING FOR

• At least five years' cyber security experience in a regulated environment - legal, professional services or financial services
• Proven experience leading cyber security operations teams
• Strong incident response experience and the ability to stay effective under pressure
• Broad technical expertise across Microsoft Azure and Entra ID, SIEM and detection engineering, endpoint and email security, identity and access management, vulnerability management, network security and SASE
• Experience managing outsourced security providers and working collaboratively with internal IT and Risk & Compliance teams
• Clear communication and stakeholder management skills
• Global law firm experience is desirable but not essential - experience transforming security operations, working with managed SOC services, security automation or purple teaming would also be a real advantage