IT Security Operations Lead

Reference: us2bp410kz9lfxaqp0ap

We are seeking an experienced IT Security Operations Lead to take responsibility for the effective operation, monitoring and continual improvement of security services across a complex technology environment. This is a hands-on leadership role, combining operational oversight with technical expertise to help protect systems, data and users from evolving cyber threats.

You will lead day-to-day security operations, ensuring that alerts, incidents and vulnerabilities are identified, assessed and managed promptly. Working closely with infrastructure, cloud, applications and service teams, you will coordinate investigations, oversee containment and recovery activities, and ensure that lessons learned are translated into practical improvements. You will also help maintain clear, accurate records and provide regular updates on security risks, incidents and performance.

Key responsibilities will include managing security monitoring and incident response processes; supporting the development and testing of cyber response plans; overseeing vulnerability management and remediation; and contributing to the implementation of appropriate security controls. You will review operational procedures, help maintain security documentation, and support audit, assurance and compliance activities. The role will also involve managing relationships with external security providers and helping to develop the capability of security operations colleagues.

The successful candidate will have substantial experience in IT security operations, security monitoring or incident response, together with a strong understanding of threat detection, vulnerability management and security technologies. Experience of working with SIEM, endpoint detection and response, firewalls, identity platforms and cloud security controls is highly desirable. You should be comfortable analysing complex incidents, making sound decisions under pressure and communicating technical issues clearly to both technical and non-technical audiences.

Strong organisational and leadership skills are essential, as is the ability to prioritise competing demands and work collaboratively across teams. Professional qualifications such as CISSP, CISM, CompTIA Security+ or equivalent experience would be advantageous. A proactive approach, sound judgement and a commitment to continuous improvement will be central to success in this role.

£67,493.00 - £70,954.00
Per annum
Added 03/11/2026
Reference: us2bp410kz9lfxaqp0ap

Other similar jobs

Incident Response Manager, Security Operations Group | Worldwide Operations Security

Added 07/10/2026

We are seeking an experienced Incident Response Manager to lead the coordination, investigation, and resolution of security incidents across a complex, globally distributed operational environment. This role will oversee incident response activities from initial detection and triage through containment, eradication, recovery, and post-incident review. You will work closely with security operations, threat intelligence, cyber investigations, technology, legal, risk, and business teams to protect people, facilities, information, and critical services. Key responsibilities include managing high-severity incidents and serving as an escalation point during active events; establishing incident priorities, response plans, communications, and decision-making processes; directing investigations involving cyber threats, insider risk,...

Learn more

Embedded Senior Operations Officer - Global Security Operations Centre

Added 09/09/2026

We are seeking an experienced Embedded Senior Operations Officer to support the effective delivery of a Global Security Operations Centre (GSOC). This role will provide security monitoring, intelligence analysis and operational coordination in a fast-paced, international environment. You will act as a trusted point of contact for security-related matters, helping to protect people, assets, information and business operations across multiple locations. Key responsibilities will include monitoring global security, safety and threat information; assessing incidents and emerging risks; and producing clear, timely notifications, briefings and situation reports. You will manage and escalate incidents in accordance with established procedures, coordinate responses with...

Learn more

Security Operations Lead

Added 02/11/2026

We are seeking an experienced Security Operations Lead to oversee the day-to-day delivery and continuous improvement of a modern security operations function. This is a key role for a confident security professional who can combine strong technical knowledge with effective leadership, ensuring that threats are identified, investigated and addressed promptly. You will lead the monitoring, triage and investigation of security alerts across a varied technology estate, coordinating the response to incidents and ensuring that appropriate containment, eradication and recovery actions are completed. You will help maintain and improve security monitoring capabilities, including SIEM, endpoint detection and response, vulnerability management and...

Learn more

Lead Cyber Security Operations Analyst

Added 23/10/2026

We are seeking an experienced Lead Cyber Security Operations Analyst to take a senior role in protecting critical systems, services and data. You will provide technical leadership within the security operations function, helping to identify, investigate and respond to threats while supporting the continuous improvement of security monitoring and incident response capabilities. Key responsibilities will include leading the triage, investigation and resolution of security alerts and incidents across cloud, infrastructure, endpoint and network environments. You will coordinate incident response activity, assess potential impact, maintain accurate records and ensure that appropriate containment, eradication and recovery actions are completed. You will also...

Learn more

Security Operations Lead

Added 23/09/2026

We are seeking an experienced Security Operations Lead to oversee the day-to-day delivery, development, and continuous improvement of security operations. This role will lead a team of security professionals responsible for monitoring, detecting, investigating, and responding to cyber threats across a complex technology environment. You will establish effective operational processes, ensure consistent service quality, and help strengthen the organisation’s overall security posture through practical, risk-based improvements. Key responsibilities include managing security monitoring and incident response activities, coordinating the investigation and containment of security incidents, and ensuring that incidents are documented, escalated, and resolved in line with agreed procedures. You will...

Learn more

Senior Lead Security Operations Analyst

Added 15/09/2026

We are seeking a Senior Lead Security Operations Analyst to provide technical leadership across security monitoring, incident response, threat detection and operational resilience. You will guide a team of analysts, coordinate the effective operation of security monitoring capabilities, and help ensure that cyber threats are identified, investigated and contained promptly. Working closely with technology, risk and business stakeholders, you will provide clear advice on security events, emerging threats and appropriate remediation activities. Your responsibilities will include leading the analysis and response to complex security incidents, reviewing alerts and investigations, and improving processes across the security operations function. You will oversee...

Learn more

Security Operations Lead

Added 15/09/2026

We are seeking an experienced Security Operations Lead to oversee the day-to-day delivery, development and continuous improvement of security operations. This role will provide leadership across monitoring, incident response, threat detection, vulnerability management and security tooling, ensuring that risks are identified, investigated and addressed promptly. You will lead a team of security analysts and work closely with technology, infrastructure, compliance and business stakeholders to strengthen defensive capabilities and maintain a resilient operating environment. Key responsibilities include managing security monitoring and alert triage, coordinating the response to security incidents, and ensuring investigations are documented through to resolution. You will establish and...

Learn more

Lead Information Security Operations Analyst

Added 09/09/2026

We are seeking a Lead Information Security Operations Analyst to provide senior-level expertise within a security operations function. This role will lead the monitoring, investigation and response to cyber security incidents across enterprise systems, networks, cloud environments and business applications. You will act as a point of escalation for complex threats, help coordinate incident response activities and ensure that security events are assessed, prioritised and resolved in line with established procedures. Key responsibilities include overseeing the analysis of alerts from security information and event management, endpoint detection and response, identity and access management, vulnerability management and other security tooling. You...

Learn more

IT Operations & Cyber Lead

Added 23/10/2026

An exciting opportunity has arisen for an experienced IT Operations & Cyber Lead to oversee the secure, reliable and efficient delivery of technology services. This role will combine operational leadership with hands-on cybersecurity expertise, ensuring that systems, infrastructure and users are supported effectively while risks are identified and managed proactively. You will be responsible for leading day-to-day IT operations, including infrastructure, networks, cloud services, endpoint management, service availability, backup and disaster recovery. Working closely with internal stakeholders and technology partners, you will set service standards, monitor performance, manage incidents and ensure that issues are resolved promptly. You will also contribute...

Learn more

Cyber Incident Operations Lead

Added 17/09/2026

We are seeking a Cyber Incident Operations Lead to oversee the detection, response and resolution of cyber security incidents across a complex technology environment. This role will provide operational leadership during high-impact events, coordinate technical and business stakeholders, and ensure incidents are managed efficiently from initial triage through to recovery and closure. You will act as a senior point of escalation, helping to protect critical services, sensitive information and organisational resilience. Key responsibilities include leading the incident response process, assessing severity and business impact, assigning appropriate response teams, and maintaining clear communication with technical specialists, senior leaders and relevant third...

Learn more

Data Protection and Privacy Operations Lead EMEA

Added 14/09/2026

We are seeking a Data Protection and Privacy Operations Lead for the EMEA region to oversee the effective delivery of privacy operations across multiple jurisdictions. This role will support the implementation, maintenance and continuous improvement of data protection practices, ensuring that business activities comply with applicable privacy laws, regulatory expectations and internal standards. You will act as a trusted partner to legal, compliance, information security, technology, human resources, procurement and operational teams, helping embed privacy into day-to-day decision-making and strategic initiatives. Key responsibilities will include managing privacy operations processes such as data subject rights requests, records of processing activities, data...

Learn more

Lead Threat Response Operations Analyst

Added 14/09/2026

We are seeking a Lead Threat Response Operations Analyst to provide senior-level expertise in the identification, investigation, and containment of cyber threats. The role will lead day-to-day threat response activities, coordinate the analysis of security events, and ensure incidents are managed efficiently from initial detection through to remediation and post-incident review. You will work closely with security operations, infrastructure, application, risk, and business teams to assess potential impact, prioritise action, and reduce the likelihood of recurrence. Key responsibilities include directing the investigation of complex and high-severity incidents; validating alerts and correlating intelligence from endpoint, network, identity, cloud, and application sources;...

Learn more

Security Operations Engineer, AWS Security Cloud Response, Amazon Security Cloud Security Response

Added 14/10/2026

We are seeking a Security Operations Engineer to support cloud security response activities in a fast-paced, highly distributed environment. In this role, you will help protect cloud infrastructure, services, and customer data by investigating security events, coordinating incident response, and improving detection and response capabilities. You will work closely with security engineering, infrastructure, software development, and operations teams to identify threats, contain incidents, and reduce the likelihood of recurrence. Your responsibilities will include monitoring and analysing security alerts, conducting technical investigations, triaging suspected compromises, and supporting the full incident management lifecycle. You will develop and maintain incident response procedures, playbooks,...

Learn more

Security Operations Engineer, AWS Security Cloud Response

Added 21/10/2026

We are seeking a Security Operations Engineer, AWS Security Cloud Response to help protect cloud environments, investigate security events and strengthen operational resilience. This role will suit an experienced security professional who is confident working across AWS services, responding to incidents and collaborating with technical teams in a fast-paced environment. You will monitor and investigate alerts from cloud security, identity, endpoint and network monitoring tools, assessing potential threats and coordinating appropriate responses. Responsibilities will include triaging incidents, conducting root-cause analysis, containing and remediating security issues, and maintaining accurate case records. You will also contribute to threat hunting, vulnerability investigations and...

Learn more

Staff Security Engineer - Security Operations

Added 05/10/2026

We are seeking a Staff Security Engineer – Security Operations to provide technical leadership across the detection, response, and continuous improvement of a modern security operations function. This role will help protect critical systems, applications, and data by developing scalable security capabilities and strengthening the organisation’s ability to identify, investigate, and contain threats. You will partner with engineering, infrastructure, application, and risk teams to embed effective security practices throughout the technology environment. Responsibilities include designing and improving security monitoring, detection, and response processes; leading investigations into complex and high-impact incidents; developing advanced detections, automation, and response playbooks; and tuning security...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.