Cybersecurity – Security Operations Consulting Manager

Overview

As a Cybersecurity Manager at Wavestone UK, you join the Global Cybersecurity Practice to deliver end-to-end Security Operations solutions across a global client base. You will lead engagements from assessment to transformation, shaping operating models and governance. You’ll manage stakeholder relationships, drive delivery quality, and contribute to business development. This role offers high-impact work on SOC, threat detection, and automation within a collaborative, growth-focused culture.

Pay / Benefits

• Competitive salary and bonus
• Income protection insurance
• 5% company pension
• Private health and dental cover
• Life insurance
• Company share scheme

Responsibilities

• Deliver current-state assessments and define target-state capabilities, operating model, and controls framework
• Conduct and review threat modelling for IT/OT and organisations
• Advise and manage Security Operations transformation projects including log management, detection, governance, incident response and automation
• Own SOC requirements definition and vendor evaluation (RFI/RFP), build scoring models and PoV, and recommend tool selections
• Manage senior stakeholders, lead decision workshops, and drive timely decisions via governance and trade-offs
• Own team performance and drive delivery quality and commercial success (proposals, scoping, and account expansion)

Key requirements

• Solid consulting foundation with external client-facing experience
• Proven track record selling consulting services (account planning, pitches, proposals, value proposition development)
• Excellent interpersonal skills at all levels and experience leading teams, coaching juniors
• Hands-on technical leadership delivering SOC solutions on at least one major vendor stack with Cloud Security Operations depth

• stakeholder management
• leadership and mentoring
• communication and collaboration across cross-functional teams
• SOC solutions
• Vendor stack experience (Microsoft Sentinel Datalake/ Defender XDR, CrowdStrike Falcon Next-Gen SIEM, Splunk ES, Google Chronicle Security Operations, Elastic Security, Nozomi Networks)
• Cloud Security Operations

…