Cyber Operations Manager

About the company

*Contract: Permanent** An exciting opportunity for a technically strong Cyber Operations Manager to join a leading global law firm and take ownership of its day-to-day cyber security operations.

Your tasks

This is a hands-on leadership role where you'll oversee security monitoring, incident response and detection engineering, while driving improvements across the wider security environment. You'll play a key role in developing the team's capabilities, strengthening security controls and ensuring the organisation is well equipped to identify, respond to and mitigate cyber threats.

• Lead and develop a cyber security operations team, providing technical guidance, mentoring and support.
• Take ownership of security incidents, coordinating investigations, containment and recovery.
• Improve security monitoring, SIEM detections, threat hunting and incident response playbooks.
• Oversee security controls across Azure, Entra ID, endpoint and email security, identity management and vulnerability management.
• Manage outsourced security providers, ensuring effective service delivery and continuous improvement.
• Work with internal stakeholders to strengthen security practices and embed security into technology projects.

The opportunity: A great role for an experienced cyber security professional looking to combine technical expertise with team leadership, taking a proactive approach to improving security operations within a complex, international environment.

Requirements

• At least five years' cyber security experience within a regulated environment, ideally legal, professional services or financial services.
• Proven experience leading and developing a cyber security operations team.
• Strong technical expertise in security operations, incident response and detection engineering.
• Experience with cloud security, particularly Microsoft Azure and Entra ID, alongside SIEM and endpoint security technologies.
• Strong stakeholder management and communication skills, with the ability to explain technical risks to non-technical audiences.
• Relevant qualifications such as CISSP, CISM or GIAC would be advantageous.

Experience with managed SOC services, security automation, purple teaming or transforming security operations would also be beneficial.

What we offer

*Salary: £95,000–£110,000, depending on experience Hybrid:** 3 days in the office and 2 days remote (minimum 60% onsite)

Other

Cyber Operations Manager – London Salary: £95,000–£110,000 | Hybrid working | Permanent