Security Operations Manager

Overview

In this role you will lead and mature the Security Operations capability within IAG Loyalty, bridging Security Engineering and Operations to improve monitoring, threat detection and incident response. You will own the incident management lifecycle, optimize SIEM and tooling, and drive playbooks, metrics and improvements across cross-functional teams. You’ll shape the security operations roadmap to support a resilient, secure and customer-focused business as technology evolves. This hands-on leadership role offers visible impact and collaboration with suppliers and internal stakeholders.

Pay / Benefits

• hybrid working (The Blend)
• London office-based role with remote options
• flexible in-office/remote balance
• opportunity to influence security at scale
• collaborative environment
• diversity and inclusion commitment

Responsibilities

• Lead continuous improvement of Security Operations across the business
• Own end-to-end incident management lifecycle and coordinate responses
• Configure and optimise SIEM, threat protection, logging and case management platforms
• Develop detection rules, alerts and automation to identify emerging threats
• Create operational playbooks/runbooks and standard operating procedures
• Produce KPIs and reporting to show security controls effectiveness
• Collaborate with Security Engineering, technology teams and managed service providers
• Support security testing, assurance activities and resilience exercises

Key requirements

• Experience in Security Operations, Cyber Defence or Incident Response in a complex enterprise
• Experience managing end-to-end security incident management lifecycle
• Hands-on with SIEM, threat protection, logging and case management platforms
• Experience developing threat detection use cases, alerts, dashboards and reporting
• Strong understanding of monitoring, investigation, containment, recovery and continuous improvement
• Experience creating operational playbooks and runbooks
• Collaborative with Security Engineering and technology teams
• Ability to work with suppliers and stakeholders across the business
• Experience developing KPIs, reporting and service metrics
• Strong analytical and communication skills; able to translate technical info for varied audiences
• Knowledge of security governance, operational resilience and regulatory requirements

• Collaborative mindset
• Strong communication
• Analytical thinking
• SIEM configuration and administration
• Threat protection tooling
• Logging and case management platforms

…