Security Operations Center (SOC) Manager

About the role

The Security Operations Center (SOC) Manager leads the day‑to‑day activities of a 24x7 SOC team, ensuring that security monitoring, analysis, and escalation meet organizational SLAs and metrics. This role acts as the primary liaison for incident response and communicates critical security events to executive management when required.

Key responsibilities

• Lead and coordinate SOC analysts to achieve monitoring, analysis, and escalation objectives.
• Oversee shift scheduling, staffing, and holiday/illness coverage for continuous coverage.
• Ensure escalation of incidents to appropriate teams and conduct follow‑up meetings to refine SOPs and playbooks.
• Provide technical oversight for security tool deployment, implementation, and configuration.
• Monitor intrusion detection systems, firewalls, and other boundary protection devices to detect and mitigate threats.
• Maintain operational metrics, KPIs, and governance processes to drive quality and efficiency.
• Communicate significant incidents and operational issues to the Director of Cybersecurity Services.

Required profile

• Minimum 7 years of security leadership experience, preferably in a SOC environment.
• Proven ability to develop long‑term career plans for team members at all levels.
• Strong operational rigor with hands‑on experience in ITIL methodologies and frameworks.
• Experience designing, implementing, and measuring security and technology management success factors.

Required skills

• ITIL methodology
• Intrusion detection systems
• Firewalls and boundary protection devices
• Security incident management products