The posting
Job Description
The Security Manager is responsible for overseeing the delivery, operation and continuous improvement of security solutions and services. The role provides technical and operational leadership to the security team, ensuring that security platforms and controls are effectively implemented, maintained and aligned with business and security requirements.
The Security Manager will work closely with internal teams, clients, vendors and other stakeholders to ensure successful project delivery, operational excellence and continuous enhancement of the organisation's security posture.
Key Responsibilities
Security Operations & Service Management
- Lead and oversee the implementation, maintenance, support and day-to-day operation of security solution platforms, including Endpoint Protection, EDR, SIEM, SOAR, Threat Intelligence and other security technologies.
- Ensure security solutions are operating effectively and meeting defined service levels, security standards and operational requirements.
- Oversee scheduled changes, troubleshooting, maintenance activities, patch management and remediation of security platforms.
- Review operational issues, incidents and recurring problems, driving timely resolution and appropriate corrective actions.
- Monitor service performance and identify opportunities to improve operational efficiency, resilience and security effectiveness.
Technical Leadership & Security Architecture
- Provide technical leadership and guidance to the security team in the design, implementation and optimisation of security solutions.
- Maintain a strong understanding of security architecture and ensure solutions are aligned with security use cases, operational requirements and established security frameworks.
- Act as a Subject Matter Expert (SME) and provide technical consultation to project teams, clients and relevant stakeholders.
- Review and recommend improvements to security controls, configurations, workflows and processes.
- Provide technical oversight for activities such as firewall rule optimisation, IPS signature tuning, EDR configuration, SIEM onboarding and security monitoring capabilities.
- Ensure appropriate security hardening, vulnerability remediation and security best practices are incorporated into solution implementation and operations.
Project & Stakeholder Management
- Lead or support security projects from planning and implementation through to operational handover and service stabilisation.
- Work closely with project managers, engineers, security teams, clients and vendors to ensure project deliverables are completed within agreed timelines and requirements.
- Manage stakeholder expectations and provide regular updates on project progress, operational issues, risks and mitigation plans.
- Identify project risks, dependencies and resource requirements, escalating issues where necessary.
- Ensure project outcomes meet agreed technical, operational and security objectives.
Process Improvement & Automation
- Drive continuous improvement initiatives to enhance the efficiency, reliability and security of operational processes.
- Identify opportunities to automate repetitive operational and maintenance activities using PowerShell, Bash, Python or other relevant technologies.
- Oversee the development and maintenance of automation capabilities supporting the deployment, management and maintenance of security solutions.
- Establish and maintain operational processes, workflows, standards and best practices to improve service quality and consistency.
Security Monitoring & Detection Capabilities
- Oversee the onboarding and integration of new log sources into SIEM and Data Lake platforms.
- Ensure appropriate log parsers, data flows and data quality are maintained for onboarded sources.
- Review and enhance security monitoring, detection and response capabilities based on evolving threats and operational requirements.
- Oversee the maintenance and optimisation of EDR blacklists, endpoint protection controls and security signatures.
- Support malware analysis and investigation activities, including the extraction and handling of quarantined malware for further analysis where required.
Team Leadership & Capability Development
- Lead, mentor and develop security engineers and analysts, providing technical guidance and support in their day-to-day responsibilities.
- Set clear objectives and expectations for team members and monitor performance against agreed deliverables.
- Identify skills gaps and recommend appropriate training, certifications and development opportunities.
- Promote knowledge sharing through technical documentation, knowledge articles, workshops and internal sharing sessions.
- Foster a collaborative, accountable and continuous-learning culture within the team.
Governance, Risk & Compliance
- Ensure security operations and implementation activities comply with relevant policies, standards, contractual requirements and industry best practices.
- Support vulnerability assessments, security reviews and remediation activities.
- Identify operational and security risks and ensure appropriate mitigation measures are implemented.
- Maintain appropriate technical documentation, operational procedures and security records.
Requirements
- Degree in Computer Science, Computer Engineering, Electronics Engineering, Information Technology, Cybersecurity or a related discipline.
- Minimum 6 years of experience in cybersecurity, security engineering, security operations or security solution implementation, with relevant experience in a leadership or supervisory capacity.
- Strong experience managing and administering enterprise security solutions such as Endpoint Protection, EDR, SIEM, SOAR, Threat Intelligence Platforms, firewalls and related security technologies.
- Demonstrated experience in leading security projects, managing stakeholders and delivering security solutions in an enterprise or client-facing environment.
- Strong understanding of security operations, security architecture, threat detection, incident response and security controls.
- Experience with scripting and automation using PowerShell, Bash, Python or equivalent technologies.
- Strong project management, problem-solving and analytical skills, with the ability to manage multiple priorities and deliverables.
- Strong communication and stakeholder management skills, with the ability to communicate technical matters effectively to both technical and non-technical audiences.
- Demonstrated ability to lead, coach and develop technical teams.
- Strong sense of ownership, accountability and commitment to delivering high-quality security outcomes.
- Passionate about information security with a strong interest in keeping up with emerging cybersecurity threats, technologies and industry practices.
Professional Certifications
- Professional certifications in cybersecurity, security operations or relevant security technologies will be advantageous, such as:
- SIEM Certified Administrator / Architect SOAR Certified Administrator Security Operations or SOC-related certifications Splunk certifications Vendor certifications in Endpoint Protection, EDR, Threat Intelligence or other security technologies Relevant industry certifications such as CISSP, CISM, GIAC or equivalent Experience with technologies such as Splunk, McAfee, Carbon Black, Anomali, RSA SecurID or other enterprise security platforms will be an added advantage.
