Security Operations Centre (SOC) Manager

Job PurposeThe SOC Manager leads the daily operations of the Security Operations Centre, overseeing on-premises and hosted security technologies, directing incident response, and leading the SOC team. The role ensures the continued maturity of the organization's security controls and the protection of its data, infrastructure, and customers against evolving cyber threats.Job DimensionsReports to: Cybersecurity ManagerDirect reports: 6Indirect reports: 0Function: Cybersecurity / Security OperationsKey AccountabilitiesSOC Monitoring & ManagementOversee the daily monitoring and review of security event activity and the cyber-threat landscape, ensuring the ongoing maturity of the organisation's security controls.Manage the resolution of cybersecurity incidents and coordinate engineering support for security systems.Identify and diagnose potential threats — including root-cause analysis and after-action reviews — to ensure security controls (firewalls, IPS, etc.) defend the enterprise against malicious network attacks.Manage customer relationships against SLAs, expectations, and contractual terms.Drive the creation and implementation of custom alerting rules, searches, and dashboards for review and investigation.Oversee support-ticket analysis to identify and implement improvements, and report findings, data, and KPIs to leadership.Own the design and engineering of key security tools, including the automation of tasks and processes through scripting and programming.Collaborate with internal teams to embed security, logging, auditing, and support needs across the software development lifecycle.Align internal SOC processes to improve analyst efficiency.GovernanceImplement the NIST Cybersecurity Framework.Ensure security teams' adherence to security controls and policies.Ensure appropriate segregation of duties and responsibilities.Reporting & DocumentationDevelop and streamline processes and procedures for efficient SOC operations.Conduct weekly and monthly service-review meetings with relevant stakeholders.Ensure the organization's data and infrastructure are protected through appropriate security controls.Perform routine security audits of the infrastructure and present findings.Training & DevelopmentEnsure all certifications required for the role are met within 6 months of joining and kept valid thereafter.Maintain knowledge across all relevant areas of security administration and expand specialist knowledge as required.Stay current with the field through continuous learning and participation in technical events.Span of CommunicationInternal: FutureX internal teamsExternal: CustomersQualifications, Experience & SkillsRequired Qualifications & CertificationsBachelor's degree in a related fieldCISSP – Certified Information Systems Security ProfessionalCISM – Certified Information Security ManagerGPEN – GIAC Penetration TesterGREM – GIAC Reverse Engineering MalwareGCFE – GIAC Certified Forensic ExaminerITIL Foundation(Certifications must be held or obtained within 6 months of joining.)Required Experience8–12 years of relevant cybersecurity / security operations experienceRequired SkillsComplex problem-solvingFluent spoken and written EnglishAbility to deliver clear, engaging, and concise presentations to customersJob-Specific Skills & CompetenciesTechnical CompetenciesSIEM, DLP, Active Directory, Email Security, Endpoint Security, IDS/IPS, and related toolingVulnerability assessmentsIdentity & Access Management principlesAdvanced Persistent Threats (APT)Secure coding practicesProficiency in Python, C++, Java, Ruby, and/or PowerShellOther RequirementsSome travel and possible project work at customers' officesSome out-of-hours work