Cyber Security Operations Manager

About you:
Join us. Unleash your energy within.
If you have world-class ambitions to reach the stars while keeping your feet on the ground, we’re the team for you. We've created a new breed of company – future-focused with reimagined ambition across all disciplines within the energy sector.
We love people who know their own potential and are not afraid to use it. We know that together, we’re far more than the sum of our parts. So, we celebrate people who want to grow and develop as we work together on some of the largest projects on the energy world stage.
We are committed to our diverse and inclusive community – a place where we can all be ourselves, thrive and develop. From day one, we offer a range of family-friendly, inclusive employment policies, flexible working arrangements, and employee networks to support staff from different backgrounds.
As an Equal Opportunities Employer, we value applications from all backgrounds, cultures, and abilities.
We’re a disability-friendly employer and can make adjustments to support you to perform at your best during the recruitment process.
Our purpose and beliefs:
As Kent, we’re tackling the greatest challenge of our time - to bring our world the energy it needs in the most responsible way ever imagined.
It’s the energy of every member of our team driven by our beliefs that is making this happen. Whatever our skill, our language, or our culture. These beliefs define and direct us every day to be the very best - for ourselves, our clients, our key stakeholders, the communities we operate in and the planet:
We PLAY BIG
We thrive on EMOTIONAL AGILITY
We are FANATICAL ABOUT PERFORMANCE
We are built on INFINITE THINKING
Read more about the Purpose, Beliefs and Guiding Principles that drive us:
Our vision for Diversity, Inclusion and Belonging:
We recognise that diversity & inclusion are catalysts for success. We’re heightening awareness on the benefits of people diversity, diversity of experiences and diversity of our perspectives. Creating a culture of inclusivity where all employees feel a sense of belonging.
Our combined energy is fueled by different nationalities, across 6 continents and 24 countries. Our commitment is to celebrate character – no matter what ethnic background, gender, age, religion, identity, or disability.
About the job:
Kent is looking for a Cyber Security Operations Manager to lead the end-to-end operation and continuous improvement of our cyber security capability, and to help embed security across the wider technology estate. The role is accountable for detecting, responding to and reducing cyber risk across Kent's global technology environment through effective security operations, threat detection, incident response and vulnerability management, working alongside colleagues in Infrastructure, Cloud, Service Operations, Enterprise Architecture, Applications and Compliance to deliver measurable risk reduction.
Working within a lean global cyber security function, the role combines operational leadership with the development of longer-term capability. The Cyber Security Operations Manager is the technical authority for security operations and a trusted partner to the wider technology teams, setting security requirements, coordinating specialist activity and assuring that controls are operating effectively. Infrastructure, Cloud, Network, Applications and Service Operations teams remain accountable for the day-to-day management of the platforms and services within their remit. Success in this role is measured by improved security outcomes and measurable risk reduction across Kent rather than by direct administration of technology platforms.
We are looking for a proactive and collaborative security professional with sufficient technical depth to provide credible direction and challenge across endpoint security, identity security, Microsoft 365, Azure, vulnerability management, threat intelligence and security monitoring. The role will raise the organisation's security maturity by working through the teams that design, own and operate these services.
Skills and Responsibilities:
1. Security Operations & Incident Response
Provide security leadership and oversight for Kent's cybersecurity monitoring and response capabilities, including defining requirements, service expectations, escalation paths and measures of effectiveness.
Lead and coordinate the response to significant or complex security events and incidents, working with the teams responsible for the affected platforms and services.
Lead incident containment, eradication, recovery and post-incident review activities.
Develop and maintain incident response procedures, playbooks and escalation processes.
Coordinate internal and external stakeholders during security incidents.
Conduct root cause analysis and ensure remedial actions are implemented and tracked.
2. Security Monitoring & Threat Detection
Define and oversee improvements to security monitoring and detection capabilities, agreeing technical changes with the teams responsible for administering the relevant platforms.
Develop and tune detection rules, alerts and use cases to improve visibility of threats.
Conduct proactive threat hunting using available security telemetry and intelligence sources.
Track and assess emerging threats and vulnerabilities relevant to Kent's operating environment.
Benchmark detection and response capabilities against recognised frameworks including MITRE ATT&CK.
3. Vulnerability & Exposure Management
Lead the end-to-end vulnerability management process by setting the framework, risk-based priorities and reporting requirements, while Infrastructure, Cloud, Applications and other service owners remain accountable for assessment support, remediation and operational change within their environments.
Develop risk-based prioritisation processes for remediation activities.
Track remediation performance and provide reporting to stakeholders.
Coordinate vulnerability assessments, penetration testing and security reviews.
Verify remediation activities and security improvements.
4. Security Technology Management
Act as the security service owner for key cybersecurity capabilities, including CrowdStrike Falcon, by defining security requirements, control outcomes, roadmap priorities and service performance expectations. Day-to-day platform administration remains with the designated Infrastructure or Platform team.
Review the configuration and effectiveness of security tooling, identify required improvements and work with the relevant platform owners to plan, implement and validate changes
Provide technical guidance on security controls relating to endpoint security, identity management, email security, cloud security and data protection.
Assist in evaluating and implementing new security technologies and capabilities.
5. Identity, Cloud & Microsoft Security
Provide security oversight for Microsoft 365, Azure and Entra ID environments by defining control requirements, reviewing risk and working with the responsible Platform and Infrastructure teams to prioritise improvements.
Monitor identity-related threats and security events.
Define Zero Trust security r
equirements and oversee their implementation by the teams responsible for identity, endpoint, network, cloud and application services.
Review security configurations and recommend improvements across cloud-based platforms.
6. Attack Surface & Offensive Security
Manage external attack surface monitoring activities.
Coordinate third-party penetration testing and red team exercises.
Review security findings and ensure appropriate remediation is planned and completed.
Identify opportunities to reduce external exposure and improve resilience.
7. Governance, Reporting & Continuous Improvement
Develop and report operational security metrics and key performance indicators.
Contribute to monthly security reporting and governance forums.
Support security audits, risk assessments and compliance activities.
Maintain operational security standards, procedures and documentation.
Drive continuous improvement initiatives to enhance the maturity of Kent's cybersecurity capability.
8. Cross-Functional Collaboration & Security by Design
Work as a trusted partner to Infrastructure, Cloud, Network and Application teams to embed security-by-design principles into solutions from the outset.
Partner with Service Operations to ensure security incidents, vulnerabilities and remediation activities are properly operationalised through ITSM processes, clear ownership models and escalation paths.
Support Enterprise Architecture and project teams to identify and address security risks early in the solution lifecycle rather than after implementation.
Improve visibility of technology assets by aligning asset management, endpoint management and security monitoring.
Champion the use of automation to reduce manual security effort and improve response times.
Provide oversight and guidance on AI,

Work arrangement
Hybrid