Looking for a job

Giacomo Mosca

@giacomomosca

Message

I rebuild mission-critical SOCs and lead cyber defence across critical national infrastructure.

United Kingdom

Message

I've led cyber defence and security operations for UK Power Networks, RS Group, Jaguar Land Rover, Blackhawk Network, Heathrow Airport and other critical national infrastructure organisations.

At UK Power Networks, I de-risked Incident Response for NCSC CAF Enhanced Profile around two years ahead of guidance and built its first structured threat-hunting methodology, scaling from roughly four hunts a year to 100 a month.

I rebuild SOCs while operations remain live—resetting operating models, teams, suppliers, tooling, on-call rhythm and measures. At Jaguar Land Rover, I rebuilt a 15-person SOC and led a seven-day defence against 40 red teams to protect China-market sales.

I've personally led serious incidents across IT, OT and cloud environments, from triage and containment through recovery and executive decision-making. My work has protected a £24bn payments business under daily APT pressure, reduced Heathrow's highest-impact vulnerabilities by 40%, and strengthened resilience across national infrastructure.

Experience

Work history, roles, and key accomplishments

Current

Cyber Security Response Manager

Current

UK Power Networks

Jun 2025 - Present (1 year 3 months)

De-risked Incident Response delivery for NCSC CAF Enhanced Profile, operationalised Threat Intelligence, and built the first structured hunting methodology. Personally leads major CNI incidents end to end across IT, OT, and cloud.

Incident Response Threat Intelligence Threat Hunting MSSP OT ICS Monitoring CAF UK Cloud Security

Global Group Head of Security Operations & Vulnerability Mgmt

RS Group PLC

Sep 2023 - Mar 2025 (1 year 6 months)

Brought 1,000 daily alerts under control, led major group-wide CSIRT incidents, and cut 20% from budget while increasing protection capability. Led the 13-person Group Information Security department as Interim CISO.

Security Operations Vulnerability Management CSIRT運用 Incident Response Budget Management Leadership

Chief Information Security Officer (Interim)

RS Group PLC

Jun 2024 - Jan 2025 (7 months)

Led the 13-person Group Information Security department as Interim CISO, selected by the Global CIO and SVP. Converted the interim mandate into permanent command of Security Operations and Vulnerability Management.

CISO Security Operations Vulnerability Management Leadership Executive Management

Chief Security Officer

Portsmouth Hospitals University NHS Trust

Dec 2022 - May 2023 (5 months)

Reduced attack surface across 30% of the estate by driving removal of unsupported operating systems. Established an enterprise phishing-risk baseline across all 10,000 users and led a team of five through financial contraction.

Security Operations Vulnerability Management Phishing KPI Reporting Team Leadership

Head of Global Security Operations (SOC Manager)

Jaguar Land Rover

Jan 2022 - Sep 2022 (8 months)

Protected sales in the brand's largest market by securing China certification and leading a seven-day response against 40 red teams. Rebuilt an underperforming 15-person SOC and directed cloud incident response across AWS, Azure, and GCP.

SOC Management Incident Response Cloud Security AWS Azure GCP Red Team Threat Intelligence

Global Head of SOC & Intelligence Services

Blackhawk Network Europe

Oct 2018 - Apr 2021 (2 years 6 months)

Protected a £24bn-transaction business through months of daily APT activity, sustaining incident command. Built the outsourced SOC and Managed Detection capability from concept through provider mobilisation.

SOC Management Incident Response Threat Intelligence Cloud Security AWS Azure GCP MSSP

Head of IT Security (Operations & Intelligence)

Financial Conduct Authority & PSR

Mar 2018 - Oct 2018 (7 months)

Built a tiered SOC with MSSP Level 1/2 monitoring and triage, keeping higher-tier expertise in-house. Mobilised a five-year, £8m MSSP through RFP and defined the Target Operating Model.

SoC Design MSSP RFP Target Operating Model Security Operations Intelligence

Head of IT Security (Operations & Intelligence)

Capgemini Consulting

Sep 2016 - Mar 2017 (6 months)

Stabilised a 79-person international MSSP delivery function serving Heathrow Airport and BAA Group CNI. Unlocked £1m additional annual revenue by raising protection quality and rebuilding client confidence.

MSSP Security Operations Incident Response Client Management Revenue Growth

Head of IT Security (Operations & Intelligence)

Heathrow Airport & Group

Jul 2015 - Sep 2016 (1 year 2 months)

Cut highest-impact vulnerabilities by 40% across a 70,000-user, 3,000-server estate. Built the airport SOC on £7m contracts and mitigated significant DDoS and web-defacement attacks.

Vulnerability Management Incident Response Digital Forensics Security Operations Centre (SOC) Transformation DDoS Mitigation Web Security

Head of Security Practice & Security Operations

Colt Enterprise Services

Oct 2012 - Aug 2014 (1 year 10 months)

Generated £40m incremental revenue by creating a security consultancy division and standardising 40 high-margin services. Recovered a stalled £4m security-infrastructure programme in five months.

Security Consultancy Revenue Generation Infrastructure Firewalls Intrusion Prevention ISO 27001 PCI DSS