IT Security Operations Lead

Ready to play a leading role in protecting critical services and shaping the future of cyber security? If you're passionate about staying one step ahead of emerging threats and thrive in a fast‑paced technical environment, this could be the perfect opportunity for you.

As our IT Security Operations Lead
, you'll be responsible for leading and evolving our cyber security detection and response capabilities, ensuring we can effectively identify, investigate and respond to security threats across the organisation. This is a key role that combines technical expertise, strategic thinking and operational leadership to help keep our systems, services and communities secure.

Buckinghamshire Council is a relatively new organisation that combines the strengths and expertise of the previous five councils in the county to create positive change for local people, communities, and businesses. We are firmly focused on the future and have made a clear commitment to serve residents better and to provide stronger representation for Buckinghamshire, both locally and nationally.

It’s an exciting time to join our IT Service. With the launch of our new IT Strategy 2025–2030
, we are embarking on an ambitious programme to modernise and simplify our technology, strengthen cyber security and governance, and make better use of digital, data and AI. Our people are central to delivering this ambition, and we are building a skilled, collaborative and customer‑focused IT Service where colleagues have the opportunity to shape change, develop their capabilities and make a real difference to the Council and the communities it serves.

This is an exciting opportunity to take ownership of a critical area of cyber security and make a real impact across the organisation. Working closely with our Security Operations Centre (SOC), IT teams, partners and suppliers, you'll lead the delivery of our security monitoring, threat detection and incident response capabilities, helping ensure we remain resilient against an ever‑evolving cyber threat landscape.

No two days are likely to be the same. You'll be involved in everything from overseeing cyber incident response and analysing security events, to improving security tooling, embedding best‑practice frameworks and helping shape our long‑term cyber security strategy. You'll play a key role in driving continuous improvement, ensuring we have the right people, processes and technology in place to respond effectively when threats arise

The role offers the opportunity to work with industry‑leading frameworks and technologies such as NIST, MITRE ATT&CK, SIEM, SOAR and EDR platforms, while collaborating with stakeholders across the organisation to strengthen our overall security posture. Whether you're influencing strategic decisions, leading improvement initiatives or responding to emerging security challenges, your expertise will help safeguard essential services and support our ambitious digital future.

Key Responsibilities

• Lead and develop cyber security detection and response capabilities.
• Oversee cyber incident management, investigation and threat mitigation activities.
• Drive continuous improvement across security tools, processes and controls.
• Provide expert advice, assurance and reporting to key stakeholders and governance groups.

For a full overview of the responsibilities and duties associated with this role, please refer to the Job Description.

Any-Desk:

As an ‘any-desk’ worker, you’ll need a desk, screen a keyboard to get your job done. You’ll need to be connected to our network to access digital folders and resources, but this can either be from home or an office location when required. You will be required to work from the office a couple of times a week,…