Security Operations Manager

Overview

Job Role:

Security Operations Manager Salary: £81,000 - £86,000 + 15% performance bonus Working

Location:

Milton Keynes / London, Hybrid working

Employment Type:

Full Time, Permanent

Job summary:

At NHBC, cyber security is fundamental to maintaining the trust of our customers and ensuring the resilience of our business. As our Security Operations Manager, you'll play a critical leadership role in protecting our technology estate, strengthening our cyber defences and ensuring we're ready to respond to an ever-changing threat landscape.

This is an exciting opportunity for an experienced operational security professional who thrives in a fast-paced environment. You'll lead a team of Security Analysts, oversee critical security technologies, drive continuous improvement and work closely with colleagues across technology, the business and third-party partners to keep our organisation secure.

If you're passionate about modern cyber defence, enjoy solving complex security challenges and want to influence how security is delivered across a large organisation, we'd love to hear from you.

You’ll lead the day-to-day operational security function, ensuring NHBC has the people, processes and technology needed to detect, respond to and recover from cyber threats.

Your responsibilities will include:

• Leading and developing a high-performing team of Security Analysts, ensuring effective threat monitoring, investigation and incident response across NHBC's environments.
• Managing relationships with our Security Operations Centre (SOC), internal technology teams and third-party suppliers to ensure rapid detection, escalation and remediation of security events.
• Driving our threat monitoring capability, identifying emerging risks that could impact our business, customers or reputation.
• Overseeing vulnerability management across on-premise and cloud environments, ensuring weaknesses are identified, prioritised and remediated effectively.
• Developing and continually improving security incident response processes, including cyber incident and data breach response.
• Managing penetration testing activities to provide assurance over live services and significant technology changes.
• Working with infrastructure, engineering and architecture teams to embed secure-by-design principles, cloud security and secure configuration standards.
• Overseeing Data Loss Prevention (DLP) investigations and partnering with business teams to manage potential information security incidents.
• Managing and optimising key security technologies, including Microsoft Defender, Sentinel, Purview, XDR, email and web security platforms, phishing simulation tools and other operational security controls.
• Leveraging automation and AI to enhance threat detection, streamline investigations and improve response times.
• Producing meaningful operational metrics, KPIs and KRIs that provide insight into security performance and support informed decision-making.
• Building strong partnerships with suppliers and service providers to ensure the highest standards of security service delivery.

You’ll be an experienced cyber security leader with a strong technical background and a passion for operational excellence. You’ll enjoy working collaboratively across teams, mentoring others and translating technical risks into practical business outcomes.

We're looking for someone with:

• Experience leading security operations teams within hybrid or outsourced environments.
• Strong technical expertise across modern security tooling, including Microsoft Defender, Microsoft E5 Security, Sentinel, AWS, Azure, Purview, SIEM, XDR/EDR, CSPM and vulnerability management platforms.
• Experience leading technical incident response, problem management and security investigations.
• A solid understanding of enterprise, network, cloud and SaaS/IaaS security.
• Experience embedding security operations into engineering, infrastructure and service management practices.
• Strong knowledge of identity and access management, security automation and scripting.
• An understanding of AI security concepts and the practical use of AI to strengthen cyber defence.
• Excellent stakeholder management…