Cybersecurity Operations Manager

CyberSecurity Operations Manager

Location: Sheffield, UK
Contract: 6 months
Rate: £400-£450 per day
IR35: Inside IR35
Working Pattern: Hybrid - 3 days per week onsite

We are currently recruiting for an experienced Cybersecurity Operations Manager to lead a highly skilled security operations function within a large, complex and globally connected organisation.

The successful candidate will be responsible for the management, efficiency and effectiveness of cybersecurity defence services, including the detection, management and response to security incidents. You will work closely with global security teams to support a 24/7/365 operational capability, ensuring effective handovers between regional teams.

• Lead a team of highly skilled cybersecurity professionals delivering global threat detection and incident response services.
• Work collaboratively with global Cybersecurity Operations teams to maintain 24/7/365 security coverage.
• Develop, manage and continuously improve local Cybersecurity Operations processes and capabilities.
• Oversee security monitoring, incident response, and operational effectiveness.
• Identify opportunities to automate and orchestrate repetitive security processes.
• Improve operational efficiency by reducing false positives and false negatives.
• Develop and maintain effective security monitoring use cases and incident response playbooks.
• Work closely with Cybersecurity, the CTO, and wider technology teams to ensure security capabilities remain fit for purpose.
• Analyse advanced attacker Tactics, Techniques and Procedures (TTPs) and use findings to improve security controls.
• Establish and track KPI metrics to measure operational effectiveness and identify opportunities for control improvement.
• Maintain a global operational perspective while working closely with regional and local stakeholders.
• Provide leadership and support to a highly technical security operations team.

• Expert knowledge of cybersecurity operations and collective defence environments.
• Strong understanding of Windows, Linux, infrastructure and networking technologies.
• Experience with intelligence analysis and cybersecurity threat intelligence principles.
• Strong knowledge of attacker TTPs, threat detection and security control improvement.
• Advanced Scripting, programming or development experience for bespoke security tooling and solutions.
• Experience developing and tracking cybersecurity KPI metrics.
• Strong cloud security experience across AWS, Azure and/or Google Cloud.
• Experience with security automation and orchestration.

• Previous experience within cybersecurity operations, cybersecurity management or a senior security leadership position.
• Proven experience managing large, highly technical cybersecurity teams.
• Experience operating within large, complex and highly regulated organisations.
• Experience working within complex data centre and enterprise technology environments.
• Previous experience managing operational teams, ideally including shift-based or 24/7 environments.
• Industry-recognised cybersecurity certifications such as CISSP, CISM, CRISC, CISA, CEH or SANS are desirable.
• Degree-level education in Cybersecurity, Information Security, Computer Science or a related discipline, or equivalent professional experience.

Cybersecurity Operations | Automation | Major Incident Management | Stakeholder Management | Security Operations Leadership | Incident Response | Threat Detection

Disclaimer
Notwithstanding any guidelines given to level of experience sought, we will consider candidates from outside this range if they can demonstrate the necessary competencies.
Square One is acting as both an employment agency and an employment business, and is an equal opportunities recruitment business. Square One embraces diversity and will treat everyone equally. Please see our website for our full diversity statement.