Security Operations

• Lead day-to-day SOC operations and triage critical security incidents
• Define incident response playbooks and mentor Tier 1–3 analysts
• Line-manage and grow the security operations team, including shift and on-call planning, recruitment, onboarding, goal setting, performance reviews, and development plans
• Own severity classification and escalation models and act as incident commander during major incidents
• Coordinate incident response across IT, Legal, Communications, and executive stakeholders, including regulatory notification timelines where applicable
• Define and report operational KPIs including detection and response times, detection coverage, incident trends, and vulnerability remediation against SLA
• Report regularly to the CISO and provide periodic risk summaries to executive leadership and audit
• Design and implement resilient enterprise security architectures across hybrid and cloud environments using secure-by-design principles
• Lead security architecture initiatives
• Direct continuous vulnerability scanning, risk prioritization, remediation tracking, and cross-team patch management workflows
• Partner with the CISO to align technical operations with ISO 27001, NIS2, SOC 2, NIST CSF, audit requirements, and risk registers
• Oversee technical setup of security awareness campaigns, simulated phishing operations, and security enablement programs
• Evaluate, deploy, and optimize SIEM, EDR/XDR, SOAR, and IAM tooling

Explore Security Operations Manager at AIOPSGROUP Careers. Review requirements and application details.