Security Operations and Cyber Manager

Location: City Of London
* Manage the key relationships with counterparts in Alfa's outsourced Security Operation Centers.
* Develop and foster a culture of continuous improvement within the Security Operations Team.
* Develop the cyber talent within the Security Operations Team.
* Provide an integrated Managed Detection, and Response (MDR) capability for Alfa covering:
+ Alfa's Corporate Environment.  + Alfa Cloud (industry leading single tenant SaaS solution for Alfa's clients, hosted using AWS infrastructure).
* Leading for Alfa on any major Cyber Security Incident Response.
* Explaining Alfa's Managed Detection, and Response (MDR) capability to auditors, clients, and prospects.
* Identify and document requirements
* Define the solution
* Project manage the implementation
* Define maintenance requirements including software and hardware updates
* Define and implement monitoring, configuration management, integration and reporting requirements
* Design and implement resilience and disaster recovery
* Develop standard operating procedures
* Document and hand over to business as usual.
* Contribute to the development and maintenance of Alfa's documented Information Security Management System (ISMS) in the areas of. Security Operations and Cyber Security.
* Lead the Security Operations team in providing answers and supporting collateral as part of client and prospect questionnaires and due diligence covering Cyber Security and Security Operations.
* Contribute to audit fieldwork by providing walkthroughs of Security Operations and Cyber Security processes, documentation and controls.
* Bachelors degree from a leading university.
* Experience in enterprise security architecture and systems.
* Proven knowledge of security standards, controls, processes and tools in a enterprise environment.
* Extensive knowledge and experience of a lead role on a Security Operations Team providing Managed Detection and Response (MDR) services covering AWS infrastructure, at considerable scale, using native AWS Services such as:  + Cloud Trail.  + Cloud Watch.  + Customer Incident Response Team (CIRT).  + Guard Duty.  + Security Hub  + Security Incident Response.  + VPC flow logs.
* Good knowledge and use of at least one enterprise SIEM tool.
* Good knowledge and practical application of Security monitoring techniques.
* Some level of exposure to Cyber Incident Response, possibly in a previous role.
* Knowledge of security industry technical frameworks and standards such as ISO 27001:2022, ISO 27002:2022, CIS 20, and guidelines produced by NIST and OWASP.
* Capable of working independently on technical projects.
* Minimum 7 years prior experience in Information Security and Cyber Security roles.
* Minimum 5 years prior experience in working in a Security Operations Centre.
* Minimum 2 years prior experience of a lead role, or manager role within a Security Operations Centre.
* Support you in flexible hybrid working
* 25 days’ annual leave plus bank holidays and flexible cultural days
* Pension contribution match up to 6%
* Provide private health insurance and access to private GP
* Support you with enhanced maternity, paternity and adoption leave with family-friendly policies
* Provide Income protection
* Provide Life, disability and worldwide travel insurance
* Offer interest free loans of up to £10,000 after probation period
* Offer Gympass given access to a range of health and wellbeing gyms, classes and apps
* Support you in pursuing membership of professional bodies
* Offer 5 days per year to attend training
* Offer 3 paid days of volunteering per year
#J-18808-Ljbffr