SOC Lead

About this role

Job Description

Job Description

SOC Manager / Security Operations Manager

Job Summary

The SOC Manager is responsible for the overall delivery, governance, and continuous improvement of Security Operations Centre (SOC) services across enterprise environments. The role combines technical leadership, people management, cyber defence strategy, stakeholder engagement, service delivery, and business growth responsibilities.

The position leads security monitoring, incident response, security tooling, compliance initiatives, and operational resilience programmes while ensuring alignment with business and customer objectives.

Key Responsibilities

Security Operations & Incident Management

• Own incident response, escalation management, and major security incident coordination.
• Drive continuous improvement of detection and response capabilities.
• Ensure SLA, KPI, and service commitments are consistently achieved.

Security Engineering & Technology Leadership

• Provide strategic oversight for SIEM, EDR, DLP, Email Security, Cloud Security, and Security Validation platforms.
• Lead onboarding of new log sources and security technologies.
• Support implementation and optimisation of security controls and monitoring capabilities.

Stakeholder & Customer Management

• Serve as the primary security operations contact for senior customer stakeholders.
• Conduct regular service reviews, governance meetings, and executive reporting.
• Translate technical risks into business-focused recommendations.
• Maintain strong relationships with business, technology, risk, and audit teams.

Leadership & People Management

• Lead, mentor, and develop SOC analysts and security engineers.
• Manage performance, capability development, and succession planning.
• Promote a high-performance and collaborative team culture.
• Drive certification and technical upskilling initiatives across the team.

Governance, Risk & Compliance

• Ensure compliance with audit, regulatory, and security policy requirements.
• Support internal and external audits through evidence collection and control validation.
• Track risks, actions, and remediation activities through governance forums.
• Drive security maturity improvement programmes.

Required Skills & Experience

Technical

• SIEM Platforms (Splunk, Microsoft Sentinel)
• EDR/XDR (CrowdStrike, Microsoft Defender)
• Email Security (Proofpoint)
• DLP Technologies (Proofpoint, Zscaler)
• Cloud Security (AWS, Wiz, Defender for Cloud)
• BAS Platforms (SafeBreach)
• Threat Hunting & Detection Engineering
• Incident Response & Security Operations

Leadership

• Team leadership and people development
• Service delivery management
• Executive stakeholder engagement
• Vendor and customer management
• Budget and commercial awareness
• Security governance and reporting

Preferred Qualifications

• Experience managing enterprise SOC services
• Experience leading security transformation and maturity initiatives
• Strong understanding of NIST CSF, ISO 27001, MITRE ATT&CK and Cyber Defence frameworks

Role Alignment

This job description aligns with Cyber Security Manager, SOC Manager, or Security Operations Lead roles within large enterprise and managed security service environments.

͏

͏

͏

͏

Mandatory Skills: Security Log Monitoring .

Reinvent your world. We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them, we need people inspired by reinvention. Of yourself, your career, and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes, so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention.

Profile Description

P

SOC Manager / Security Operations Manager

Key Responsibilities

Security Operations & Incident Management

• Lead 24x7 SOC operations and security monitoring services.
• Own incident response, escalation management, and major security incident coordination.
• Drive continuous improvement of detection and response capabilities.
• Ensure SLA, KPI, and service commitments are consistently achieved.

Security Engineering & Technology Leadership

• Provide strategic oversight for SIEM, EDR, DLP, Email Security, Cloud Security, and Security Validation platforms.
• Lead onboarding of new log sources and security technologies.
• Support implementation and optimisation of security controls and monitoring capabilities.

Stakeholder & Customer Management

• Serve as the primary security operations contact for senior customer stakeholders.
• Conduct regular service reviews, governance meetings, and executive reporting.
• Translate technical risks into business-focused recommendations.
• Maintain strong relationships with business, technology, risk, and audit teams.

Leadership & People Management

• Lead, mentor, and develop SOC analysts and security engineers.
• Manage performance, capability development, and succession planning.
• Promote a high-performance and collaborative team culture.
• Drive certification and technical upskilling initiatives across the team.

Governance, Risk & Compliance

• Ensure compliance with audit, regulatory, and security policy requirements.
• Support internal and external audits through evidence collection and control validation.
• Track risks, actions, and remediation activities through governance forums.
• Drive security maturity improvement programmes.

Business Growth & Service Development

• Identify new security opportunities and service enhancements.
• Support renewals, expansions, and commercial discussions.
• Develop business cases and strategic roadmaps for security investments.
• Deliver measurable improvements in security posture and operational effectiveness.

Required Skills & Experience

Technical

• SIEM Platforms (Splunk, Microsoft Sentinel)
• EDR/XDR (CrowdStrike, Microsoft Defender)
• Email Security (Proofpoint)
• DLP Technologies (Proofpoint, Zscaler)
• Cloud Security (AWS, Wiz, Defender for Cloud)
• BAS Platforms (SafeBreach)
• Threat Hunting & Detection Engineering
• Incident Response & Security Operations

This job description aligns with Cyber Security Manager, SOC Manager, or Security Operations Lead roles within large enterprise and managed security service environments.

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.