SOC Manager – Security Operations Center Lead

About the role

The Security Operations Center (SOC) Manager will lead a multi‑level team of analysts to ensure 24x7 monitoring, detection, and response to security incidents. This senior position requires deep cybersecurity expertise, especially within the banking sector, and the ability to drive continuous improvement of SOC processes and technology.

Key responsibilities

• Manage day‑to‑day SOC operations and oversee L1, L2, and L3 analysts.
• Develop, maintain, and evolve SOC policies, playbooks, and escalation procedures.
• Coordinate incident investigation, containment, mitigation, and documentation.
• Interface with IT, application teams, and senior management during incidents.
• Maintain and enhance security tools such as SIEM, SOAR, EDR, IDS/IPS.
• Track KPIs, generate regular SOC performance reports, and drive automation initiatives.
• Recruit, schedule shifts, and manage staffing for the SOC.
• Stay current on emerging threats, vulnerabilities, and regulatory requirements.

Required profile

• 10+ years of cybersecurity experience, with at least 3 years in a SOC leadership role.
• Proven experience in the banking domain.
• Strong leadership, communication, and stakeholder‑management abilities.
• Familiarity with GDPR, HIPAA, PCI‑DSS or similar compliance frameworks.

Required skills

• SIEM platforms (Splunk, QRadar, ArcSight).
• SOAR tools and endpoint security solutions.
• IDS/IPS, EDR, and other detection technologies.
• Security frameworks: MITRE ATT&CK, NIST, ISO 27001.
• Threat intelligence, threat hunting, malware analysis, incident response, and vulnerability assessment.