Head of Security Operations

About the team

Group Information Security (GIS) at OSB supports the business by protecting the bank, its customers, and its critical assets while enabling the organisation to operate safely and effectively. We identify, assess, and manage security risks across people, processes, technology, data, and third-party suppliers, ensuring risks remain within the bank’s risk appetite.

The function establishes security policies, standards, and governance frameworks, oversees compliance with regulatory and industry requirements, and works closely with business and technology teams to embed security into new products, services, and change initiatives. It also monitors and responds to security incidents, promotes operational resilience, manages third-party security risks, and drives security awareness across the organisation. Through these activities, the security function helps maintain customer trust, supports regulatory compliance, and enables the bank to achieve its strategic objectives while effectively managing risk.

As the Head of Security Operations you will be accountable for the effective operation, continuous improvement and resilience of the Bank's security operations capability, covering Security Operations Centre monitoring and response, Identity and Access Management services, security analysis, operational security controls and supplier-delivered security services.

The Head of Security Operations is a senior leadership role within the Group Information Security (GIS) function, reporting directly to the Information Security Director.

The role leads a team of approximately 15-20 security professionals located in the UK and India offices, supported where appropriate by third-party managed security service providers. The team provides 24x7 or extended-hours security monitoring and response, identity and access management operations, vulnerability and threat analysis, security tooling administration, control assurance support, reporting, and operational support.

Your responsibilities will include…

• Leading and developing the Security Operations function, setting clear direction, priorities, and performance expectations for a team of 15–20 professionals
• Build a high-performing, collaborative and service-focused culture, supported by workforce planning and recruitment, performance management and professional development whilst ensuring the function has the appropriate capability, capacity, tooling, and governance to meet current and future business needs

• Owning the end-to-end security monitoring and cyber incident response, including internal SOC and third-party services
• Overseeing detection, triage, investigation and response to threats using security tooling (e.g. SIEM, SOAR, EDR/XDR) and acting as the senior escalation point and cyber incident commander where required
• Ensuring incident response plans, playbooks, testing, and post-incident reviews are effective and continuously improved

• Leading IAM operations, ensuring secure, compliant access to systems, data and platforms whilst driving improvements in IAM automation, governance, and control effectiveness, ensuring risks are identified, reported and remediated in line with policy

• Leading security analyst services including threat analysis, vulnerability management, investigations, reporting and control assurance
• Ensuring security risks, vulnerabilities and control weaknesses are identified, prioritised, and remediated in partnership with technology teams
• Support risk assessments, change initiatives, and assurance activities while maintaining alignment with risk frameworks, policies, and regulatory requirements

• Defining and tracking KPIs, KRIs and SLAs to measure performance, risk reduction and control effectiveness
• Delivering clear, insightful reporting for operational teams, senior stakeholders, audit and regulators
• Driving continuous improvement through automation, tooling optimisation, and process…