Cyber Security Operations Manager

Job Description

We are looking for a highly skilled Technical Operations Lead to join our Cybersecurity Investigations team. This role is pivotal in managing technical operations and ensuring the integrity, confidentiality, and availability of our digital assets through proactive and reactive cybersecurity measures. The successful candidate will lead a team of skilled professionals and collaborate with our global leads and client partners to successfully deliver the UK Timezone of a global service team.

This role is 100% remote, based in the U.K. with flexible hours required to support global operations. The role reports into our US-based Service Delivery team and works closely with clients based in the U.K. and and US.

Key Responsibilities

• Provide leadership by mentoring and developing a team of cybersecurity professionals, focusing on building a collaborative, innovative, and high-performing work environment through effective management of performance, recruitment, and ongoing training initiatives.
• Actively build and develop the capabilities of team members through the design and execution of training programs, and by dedicating daily time to quality assurance activities such as reviewing individual ticket handling, providing constructive feedback, and identifying skill gaps for targeted development.
• Oversee all daily technical operations within the Cybersecurity Investigations team by ensuring established client security protocols are rigorously followed.
• Manage and coordinate all aspects of incident response and forensic investigations through following the client parameters while also proactively making suggestions for process improvement.
• Manage long-term initiatives for the global team to include global alignment projects, development of processes and standards, change management of processes, reporting and other requests by clients.
• Stay abreast of new investigation types and ensure the team has all applicable investigation skills to perform at an adequate level.
• Serve as the primary technical liaison between the client team and the UK Based Cybersecurity Investigations team and other departments, facilitating communication and cooperation, preparing detailed reports and presentations on security trends, incident status, and risk mitigation for senior management.
• Monitor scheduling to meet baseline standards, handle attendance, timecard tracking and ensure that team members are following applicable laws and regulations in their country.
• Escalate performance and team morale concerns to delivery managers and people experience team for support and documentation.

Required Skills and Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Certification in cybersecurity (e.g., CISSP, CISM, or equivalent).
• Minimum of 10 years of experience in cybersecurity operations or a similar role (hands-on technical experience).
• Minimum of 5 years of active investigator experience in an IR team, preferably in global enterprise environment
• Proven experience leading and managing technical teams.
• Strong understanding of cybersecurity frameworks and standards (e.g., NIST, ISO/IEC 27001, IAM).
• Proficiency with cybersecurity tools and platforms (e.g., SIEM, SOAR, SAS, Sandboxes, EDR solutions and cloud technologies).
• Working of knowledge of access control principles, cloud technologies (CNAPP, CSPM), data retention, and encryption methodologies.
• Excellent problem-solving, investigative mindset, and communication skills.
• Experience presenting at a program level for clients and/or cross functional partners
• Demonstrated ability to work under pressure
• Preferred, active participation in cybersecurity communities or forums.
• Preferred, knowledge of programming languages (including database queries)
• Preferred, forensic investigation experience