Head of Cyber Security Operations

About The Role

Head of Cyber Security Operations.

Remote (with travel to the London or Leeds office once per month).

This senior leadership role plays a key part in shaping QA’s cyber security strategy and operational resilience. You will lead the Security Operations function, driving improvements to systems, processes and tooling to strengthen the security and robustness of QA’s IT estate.

As Head of Cyber Security Operations, you will be accountable for protecting QA against cyber threats, vulnerabilities and exploits. You will lead both direct and virtual teams responsible for 24/7 security operations, incident response and continuous risk reduction across on‑premise and cloud environments.

• Lead and manage the Security Operations Centre (SOC), ensuring effective 24/7 monitoring and on‑call coverage.
• Oversee security event monitoring, incident response, and threat intelligence across QA.
• Coordinate and manage security incidents end‑to‑end, ensuring rapid and effective resolution.
• Ensure monitoring, logging, and prevention tools are fit for purpose and deliver best value.
• Lead security teams delivering security operations and related projects.
• Manage third‑party security providers and service partners.
• Proactively assess the threat landscape and implement measures to reduce cyber and insider risk.
• Define and execute operational security strategies across on‑premise and cloud platforms.
• Produce clear security metrics, dashboards and reports for senior stakeholders.
• Plan and oversee vulnerability assessments, penetration testing, audits, and Red Team activities.
• Ensure security operations align with regulatory, compliance and internal governance requirements.
• Drive remediation of identified vulnerabilities and ensure risk controls are implemented effectively.

• Senior‑level experience within cyber security, information security or a Security Operations Centre.
• Strong technical background across cyber security, networks, operating systems and cloud services.
• Deep knowledge of security principles including risk management, SIEM, threat intelligence, and vulnerability management.
• Experience with penetration testing tools, methodologies, and security assessment techniques.
• Proven experience in incident response, SIEM, SOAR, and UEBA solutions.
• Strong leadership, communication and stakeholder‑management skills.

• 27 days Annual Leave (4 days used for the festive closure) plus Bank Holidays.
• Holiday Buying scheme.
• Medicash plan, Wellhub, Cycle to Work scheme.
• Private Medical Insurance at corporate rates.
• Employee Assistance Programme.
• Employee Discounts Benefit Hub.
• 3 Development days.
• 2 Charity days per year.
• Pension Scheme.
• Early Friday Finish at 4pm.

We are an equal opportunity employer, focused on promoting a welcoming and inclusive environment. We embrace diversity; welcome applications from all candidates and aim to support the career growth of everyone. This means no matter what your gender, age, ethnicity, beliefs, or sexual orientation, or if you are disabled or a carer, we welcome you and the different perspectives you bring to our diverse family.

As a Disability Confident Employer, we guarantee that all applicants with a disability who meet the role criteria will progress to the next stage of the process. Please let us know if you require any reasonable adjustments.

#LI-VK