Senior Security Operations Centre Lead

About the role

NETS Group is looking for a Senior Security Operations Centre Lead to act as the primary cybersecurity lead and focal point for its Business Unit and the Business Unit's SOC. The role oversees security monitoring, detection, incident response, compliance and security governance across the Business Unit's systems, applications and infrastructure.

Key responsibilities

• Provide SOC oversight, identify and mitigate cybersecurity risks, and represent the Business Unit in reviews, tabletop exercises, audits and management forums
• Ensure effective monitoring and detection coverage, review use cases and alerting, and onboarding of systems into SIEM, EDR/XDR and monitoring platforms
• Support threat hunting and review alerts, investigations and escalations
• Lead incident response coordination, triage, containment, recovery and post-incident reviews, and track remediation to completion
• Coordinate cybersecurity activities supporting compliance, audit findings and internal and external assessments, covering CCoP, Cyber Trust Mark, MAS TRM, Cyber Hygiene and NETS policies
• Act as principal liaison with Group SOC, technology teams, risk and compliance, and internal and external auditors, and report security posture to management
• Drive continuous improvement, security metrics, KPIs and reporting, and contribute to enterprise security initiatives

Required profile

• 10+ years of cybersecurity, information security or security operations experience
• Minimum 5 years in a leadership, security management or senior security operations role
• Experience supporting PCI-DSS environments and in regulated environments
• Preferred: payments, banking, financial services or critical national infrastructure background; familiarity with PCI-DSS, MAS TRM, NIST CSF, ISO 27001 and MITRE ATT&CK

Required skills

• Security operations, monitoring and detection, incident response, vulnerability management, security governance and compliance
• Strong understanding of payment systems, SIEM, EDR/XDR, security controls and frameworks
• Preferred: Elastic, LogRhythm, Trend Micro, Microsoft Defender, CISSP, CISM, CRISC, CCSP, PCIP, GIAC, AWS/Azure/Microsoft security certifications