• 10–12+ years in security operations/incident response, with 3–5+ years leading teams and managing major incidents.
• Proven ownership of SOC KPIs (MTTD/MTTR, alert volume, precision/recall) and operational SLAs.
• Hands-on experience with SIEM/XDR platforms (Microsoft Sentinel & M365 Defender preferred; Splunk, CrowdStrike, or SentinelOne equivalents acceptable).
• Strong command of incident management frameworks (NIST 800-61, ISO 27035) and audit regimes (ISO 27001, SOC 2; familiarity with NIS2, Law 25, CPRA).
• Demonstrated people leadership: hiring, performance management, coaching, and career development.
• Excellent written and oral communication skills for executive and technical audiences.

• Experience building global or follow-the-sun SOCs; MSSP oversight.
• Leadership in automation/SOAR (Logic Apps, Sentinel automation rules, Splunk SOAR, XSOAR) and basic scripting (PowerShell/Python).
• Experience integrating threat intelligence (TI/MISP), vulnerability intel, and exposure management into SOC workflows.
• Background in OT/ICS environments.

• Competitive compensation and benefits package.
• Opportunity to lead a global security operations function and shape strategic initiatives.
• Access to cutting-edge technologies and professional development programs.
• Collaborative, inclusive work environment focused on innovation and growth.

If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now.

If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion on your career.

This posting is not for an existing vacancy with the organization.

AI may be used to screen, assess or select applicants for the position.