Cyber SOC Lead No

If you require this advert in another format, please  or call .

This isn't a typical SOC leadership role. You'll lead security operations across a unique public sector partnership, protecting multiple organisations, thousands of users and services that support economic development, skills and careers across Scotland.

As part of Enterprise Information Services (EIS), you'll be responsible for driving the maturity of our Security Operations Centre, leading a team of analysts, shaping incident response capabilities and influencing cyber security strategy across the partnership. You'll work at the forefront of cyber defence, using technologies such as Microsoft Sentinel, Defender, Entra  Security Copilot to strengthen our ability to identify, respond to and learn from emerging threats.

This is your opportunity to lead and evolve a Security Operations Centre that protects critical public services used by thousands of people across Scotland.

As SOC Lead, you'll be at the forefront of cyber defence, leading a team of analysts and working with our managed SOC provider to detect, investigate and respond to threats. You'll shape how security operations are delivered across a unique public sector partnership, driving innovation, strengthening resilience and ensuring we're ready to respond to an ever-changing threat landscape.

Using technologies including Microsoft Sentinel, Defender, Entra , Intune, Purview and Security Copilot, you'll turn insight into action, improve detection capabilities and help build a modern, intelligence-led security operation. You'll lead major incident response activities, challenge and influence suppliers, run cyber exercises, and help define what great security operations looks like for the future.

This is more than a SOC leadership role. It's a chance to shape strategy, influence decision-making, and make a visible impact on the security of organisations that support skills, careers and economic development across Scotland.

We're looking for a passionate cyber security professional who combines strong technical expertise with the ability to lead, inspire and drive change.

You may already be leading a SOC team, or you could be a senior cyber specialist ready to take the next step into leadership. Either way, you'll be someone who thrives on solving complex challenges, continuously improving services and helping others develop.

You’ll bring experience in security operations, incident response and cyber investigations, along with the confidence to lead during high-pressure situations and communicate effectively with both technical and non-technical audiences.

• Strong experience in security operations, threat detection and incident response.
• Experience leading, mentoring or developing cyber security professionals.
• Knowledge of the Microsoft security ecosystem, including Sentinel and Defender.
• Experience working with managed security service providers or outsourced SOC services.
• A proactive mindset, focused on continuous improvement and innovation.
• The ability to influence stakeholders and translate technical risks into business-focused decisions.
• Demonstrable professional experience equivalent to SCQF Level 9 in Cyber Security, Information Security, Computer Science or a related discipline
• Professional certifications such as Blue Team Level 2 (BTL2), CISSP, CISM or highly desirable, with GIAC certifications an added advantage.

Above all, we're looking for someone who wants to make a difference. Someone who is excited by the challenge of protecting critical services, developing people and helping shape the future of cyber security across a unique…