Security Operations Centre (SOC) Manager

Job Purpose
The SOC Manager leads the daily operations of the Security Operations Centre, overseeing on-premises and hosted security technologies, directing incident response, and leading the SOC team. The role ensures the continued maturity of the organization's security controls and the protection of its data, infrastructure, and customers against evolving cyber threats.
Job Dimensions
Reports to: Cybersecurity Manager
Direct reports: 6
Indirect reports: 0
Function: Cybersecurity / Security Operations
Key Accountabilities
SOC Monitoring & Management
Oversee the daily monitoring and review of security event activity and the cyber-threat landscape, ensuring the ongoing maturity of the organisation's security controls.
Manage the resolution of cybersecurity incidents and coordinate engineering support for security systems.
Identify and diagnose potential threats — including root-cause analysis and after-action reviews — to ensure security controls (firewalls, IPS, etc.) defend the enterprise against malicious network attacks.
Manage customer relationships against SLAs, expectations, and contractual terms.
Drive the creation and implementation of custom alerting rules, searches, and dashboards for review and investigation.
Oversee support-ticket analysis to identify and implement improvements, and report findings, data, and KPIs to leadership.
Own the design and engineering of key security tools, including the automation of tasks and processes through scripting and programming.
Collaborate with internal teams to embed security, logging, auditing, and support needs across the software development lifecycle.
Align internal SOC processes to improve analyst efficiency.
Governance
Implement the NIST Cybersecurity Framework.
Ensure security teams' adherence to security controls and policies.
Ensure appropriate segregation of duties and responsibilities.
Reporting & Documentation
Develop and streamline processes and procedures for efficient SOC operations.
Conduct weekly and monthly service-review meetings with relevant stakeholders.
Ensure the organization's data and infrastructure are protected through appropriate security controls.
Perform routine security audits of the infrastructure and present findings.
Training & Development
Ensure all certifications required for the role are met within 6 months of joining and kept valid thereafter.
Maintain knowledge across all relevant areas of security administration and expand specialist knowledge as required.
Stay current with the field through continuous learning and participation in technical events.
Span of Communication
Internal: FutureX internal teams
External: Customers
Qualifications, Experience & Skills
Required Qualifications & Certifications
Bachelor's degree in a related field
CISSP – Certified Information Systems Security Professional
CISM – Certified Information Security Manager
GPEN – GIAC Penetration Tester
GREM – GIAC Reverse Engineering Malware
GCFE – GIAC Certified Forensic Examiner
ITIL Foundation
(Certifications must be held or obtained within 6 months of joining.)
Required Experience
8–12 years of relevant cybersecurity / security operations experience
Required Skills
Complex problem-solving
Fluent spoken and written English
Ability to deliver clear, engaging, and concise presentations to customers
Job-Specific Skills & Competencies
Technical Competencies
SIEM, DLP, Active Directory, Email Security, Endpoint Security, IDS/IPS, and related tooling
Vulnerability assessments
Identity & Access Management principles
Advanced Persistent Threats (APT)
Secure coding practices
Proficiency in Python, C++, Java, Ruby, and/or PowerShell
Other Requirements
Some travel and possible project work at customers' offices
Some out-of-hours work

Work arrangement
No