soc manager

CareCloud

<div></div><div><div>Department: INFORMATION SECURITY Experience: 8 YearsDeadline: May 06, 2026Location: BAGH, Pakistan</div><div><h4 class="jobSectionHeader"><b>
Job Profile</b></h4><p></p><div><p><b>
Role Description:</b></p>
<p>We are seeking an experienced Cyber Security Manager to lead CareCloud&rsquo;s Security Operations Center (SOC) at the Bagh AJK office. The SOC Manager will be responsible for ensuring effective monitoring, detection, response, and remediation of cybersecurity threats. The ideal candidate will have strong expertise in penetration testing, ethical hacking, incident response, and managing SOC operations.</p>
<p><b>Key Responsibilities:</b></p>
<ul><li>Lead and manage SOC operations to ensure high performance and continuous improvement.</li>
<li>Oversee daily security monitoring, threat detection, and incident response activities.</li>
<li>Conduct and supervise penetration testing and ethical hacking exercises to identify vulnerabilities and recommend mitigation strategies.</li>
<li>Develop, implement, and maintain SOC processes, workflows, and documentation.</li>
<li>Coordinate with IT, network, and application teams to ensure security compliance and timely resolution of incidents.</li>
<li>Track and report key security metrics, incidents, and performance of SOC operations to leadership.</li>
<li>Manage escalation processes and ensure timely response to critical security events.</li>
<li>Stay updated with the latest cybersecurity threats, tools, and best practices.</li>
<li>Provide training, mentoring, and knowledge sharing within the SOC team.</li>
<li>Participate in risk assessments, audits, and compliance activities as required.</li>
</ul>
</div><p></p><div><h4 class="jobSectionHeader"><b>Tools / Skills</b></h4><p></p><div><p><b>
Experience:</b></p>
<ul><li>8 years plus of experience in cybersecurity, with at least 3&ndash;5 years in SOC leadership or management.</li>
<li>Hands-on experience in penetration testing, ethical hacking, vulnerability management, and incident response.</li>
<li>Experience managing SOC operations.</li>
<li>Strong knowledge of security monitoring tools (SIEM, IDS/IPS, endpoint protection, firewalls, etc.)</li>
</ul>
<p><b>Skills:</b></p>
<ul><li>In-depth understanding of cybersecurity frameworks (NIST, ISO 27001, MITRE ATT&amp;CK).</li>
<li>Strong analytical, problem-solving, and decision-making abilities.</li>
<li>Excellent communication and leadership skills.</li>
<li>Ability to work under pressure and respond to security incidents promptly.</li>
</ul>
<p><b>Qualifications:</b></p>
<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Security, or related field.</li>
<li>Relevant certifications preferred: CISSP, CISM, CEH, OSCP, or GIAC.</li></ul></div></div></div></div><p></p>
<br><div><h5 class="jobSectionHeader"><b>Additional Information</b></h5><div><div><p><b>
Total Position(s)
</b></p><p>1 Positions</p></div><div><p><b>
Gender</b></p><p>
Does not matter</p></div><div><p><b>
Minimum Education</b></p><p>
Bachelors Degree</p></div><div><p><b>
Degree Title</b></p><p>
Bachelors Degree</p></div><div><p><b>
Shift</b></p><p>
Evening</p></div><div><p><b>
Nature of Job</b></p><p>
Work From Office</p></div></div></div>

Manager Cyber Security

البنك التجاري الدولي

<div></div><div><div>Description<div></div><p><br>
JOB PURPOSE</p>
<p>
To oversee and manage the Security Operations Center (SOC) related activities including, threat monitoring, triage and response to develop detailed root cause analysis and escalate for emergency response as per the approved process.</p><br>
<p>
</p><p>Description</p>
<p>
Security Incident Response Management</p>
<p>
1. Provide management oversight for the identification, triage and response of events or incidents of apparent security breaches to maintain the security posture.
</p><p>2. Conduct Security event analysis reporting on activities through regular scheduled reporting and communications in order to highlight the main incidents and events.
</p><p>3. Identify and handle incidents, which need special attention or escalation to secure the overall bank&rsquo;s security and mitigate potential risks.
</p><p>4. Direct the creation and maintenance of incident response run books of the Analysts team run-books.</p>
<p>
5. Act as a lead throughout incident scenarios and provide subject matter expertise in cybersecurity incident response to facilitate the investigation and root cause analysis.</p>
<p>
6. Ensure proper reporting for daily, monthly, quarterly and annual security posture, SOC and executive reporting and dashboards.</p>
<p>
7. Recommend security solutions based on security postures and gaps identified.</p>
<p>
8. Manage communication with other departments to facilitate investigation process.</p>
<p>
9. Develop and update SLA between SOC and other departments when required and maintain SLA.</p>
<p>
Strategy</p>
<p>
10. Participate in the formulation and implementation of the Security Operations Center Department strategy to ensure the alignment with CIB strategy</p>
<p>
Policies, Processes and Procedures</p>
<p>
11. Participate and recommend improvements to policies, processes and procedures and manage their implementation to ensure all relevant procedural/legislative requirements are carried out.</p>
<p>
Day-to-day Management</p>
<p>
12. Supervise the day to day operations of the Incident Management &amp; Response team providing some guidance in the related area, encouraging teamwork and facilitating related professional work processes in order to achieve high performance standards</p>
<p>
Supervision</p>
<p>
13. Supervise the activities and work of subordinates to ensure that all work within a specific area is carried out in an efficient manner and in compliance with the set policies, processes and procedures</p>
<p>
Compliance</p>
<p>
14. Ensure compliance with all relevant CBE regulations, banking laws, AML regulations and internal CIB policies and code of conduct in order to maintain CIB&rsquo;s sound legal position and mitigate any potential risks</p><div><br>
</div></div><div>
Qualifications<div></div><p><br>
Qualifications &amp; Experience</p>
<ul><li> Bachelor&rsquo;s degree of Engineering, Computer Science or equivalent</li></ul>
<ul><li> Minimum 8 - 10 years of experience in IT Security or related fields</li></ul>
<ul><li> Strong understanding of incident handling procedures
</li></ul><ul><li> Experience with packet and log analysis using commercial and open source tools</li></ul>
<ul><li> Recommended Certifications:</li></ul>
<p>
o Certified Information Systems Security Professional (CISSP)</p>
<p>
o Certified Information Security Manager (CISM)</p>
<ul><li> Mandatory Certification:</li></ul>
<p>
o GIAC Certified Incident Handling (GCIH)</p><br>
<p></p>
<p>
Skills</p>
<ul><li> Very good command of English and Arabic language</li></ul>
<ul><li> Very good Analytical skills</li></ul>
<ul><li> Very good Communication skills</li></ul>
<p>
Very good MS Office skills<br>
</p><div>
</div></div><div>Primary Location: Egypt-Giza-SMART VILLAGE BLDG. 2</div><div>
Job: Back Office</div><div>
Organization: FINANCE, STRATEGY, OPERATIONS &amp; TECHNOLOGY</div><div>
Shift: Day Job</div><div>
Job Type: Full-time Employee</div></div>

SECURITY INCIDENT RESPONSE MANAGER

Tyto Athene

<div>Description:
<div>
Tyto Athene is searching for an <b>Operations Manager (Watch Officer) </b>to support a DoD customer in Adelphi, Maryland.</div><div></div><div><b><br>
Responsibilities:</b></div><ul><li><div>
The DCO Team Lead serves as the Operations Manager and Watch Officer responsible for managing 24/7/365 Defensice Cyber Operations at Cheyenne Mountain Air Force Station (CMAFS), Colorado Springs, CO (CMAFS).
</div></li><li><div>This position provides leadership for cyber defense operations supporting the customer's Center CSSP Mission.
</div></li><li><div>Responsibilities Manage and oversee 24x7x365 DCO on-site staffing, scheduling, and services for CSSP subscribers.</div></li><li><div>
Coordinate incident handling and incident response programs across the DCO team.</div></li><li><div>
Provide weekly recurrent briefings to identify status and processing of relevant problems, challenges, and technical data with recommended solutions.</div></li><li><div>
Maintain subscriber relationships with agencies, organizations, and cleared defense contractor facilities across DoD.</div></li><li><div>
Ensure uninterrupted performance of monitoring, reporting, and protection services.</div></li><li><div>
Coordinate with DCSB Watch Officers, Net Defenders, and threat teams when new vulnerabilities are found.</div></li><li><div>
Provide oversight for Cyber Protection Condition, Incident Reporting and Response, and Insider Threat/Incident Response activities.</div></li><li><div>
Conduct tabletop exercises to generate operational compliance to Evaluator Scoring Metrics (ESM) requirements.</div></li></ul>
Qualifications:
<div><b>
Required:</b></div><ul><li>
A Bachelor&rsquo;s Degree in a related technical field is required, however, can be replaced with 3 years of relevant industry experience (in addition to the minimum years of experience requirement).
</li><li><div>Minimum five (5) years of experience in cyber defense operations, security operations center (SOC) management, or related field.</div></li><li><div>
Minimum three (3) years of supervisory or management experience.</div></li><li><div>
Demonstrated experience managing 24/7 Security Operations Center (SOC) or similar operational environment.</div></li><li><div>
Knowledge of CSSP operations, DoD Information Network (DoDIN), and cyber threat landscape.</div></li><li><div>
Proficiency with DoD-mandated COTS and GOTS cyber defense tools.</div></li><li><div>
Experience with incident response, threat analysis, and vulnerability management programs.</div></li><li><div>
Knowledge of DoD cybersecurity policies, directives, and compliance requirements.</div></li><li><div>
ITIL Foundations certification required within three (3) months of start date.</div></li><li>
Certifications: IAT - I: Cisco Certified Network Associate - Security, Certified Network Defender, Network+ CE, CompTIA A+ CE IAM - 1: Cloud+, CND, CGRC, Secutriry +CE IAM - 2: CGRC, CASP, CISM, CISSP (or Associate), CCISO</li></ul><div><b>
Clearance:</b></div><ul><li>
TS/SCI Clearance required.</li></ul><div><b>
Location:</b></div><ul><li>
Adelphi, MD</li></ul>
About Tyto Athene:
<div><b>
Compensation:</b></div><ul><li>
Compensation is unique to each candidate and relative to the skills and experience they bring to the position. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.</li></ul><div><b>
Benefits:</b></div><ul><li>
Highlights of our benefits include Health/Dental/Vision, 401(k) match, Paid Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and parental leave.</li></ul><div></div><div><br>
Tyto Athene is a trusted leader in IT services and solutions, delivering mission-focused digital transformation that drives measurable success. Our expertise spans four core technology domains&mdash;Network Modernization, Hybrid Cloud, Cybersecurity, and Enterprise IT&mdash;empowering our clients with cutting-edge solutions tailored to their evolving needs. With over 50 years of experience, Tyto Athene proudly support Defense, Intelligence, Space, National Security, Civilian, Health, and Public Safety clients across the United States and worldwide.</div><div>
</div><div>
At Tyto Athene, we believe that success starts with our people. We foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role in shaping the future of technology. Are you ready to join #TeamTyto?</div><div>
</div><div>
Tyto Athene, LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.</div></div>

Operations Manager (Watch Officer)

ABIS

On-siteFull time
<br><br>
Dhahran, Eastern Province, Saudi Arabia
<br>Description
<br><br>
We are seeking a highly experienced Cybersecurity Security Operations Center (SOC) Lead to join our team. The SOC Lead will be responsible for leading and managing the day-to-day operations and ensuring the organization's security posture is maintained.
<br><br>
<b>Key Responsibilities:</b><br>
<ul>
<li>Leading a team of ITHRA SOC analysts and engineers in the detection, investigation, and response to security incidents</li>
<li>Lead and develop a well-trained ITHRA SOC Team with core competencies necessary to detect, investigate, response, manage risk, stay ahead of security threats or position team to effectively mitigate risk</li>
<li>Monitoring, analyzing, and detecting security events and incidents</li>
<li>Analyze and evaluate network, system, and security alerts performing triage to include determining scope, urgency and potential impact, identifying the specific vulnerability</li>
<li>Actively participate in decision making with leadership and seek to understand the broader impact of current decisions</li>
<li>Developing, implementing, and maintaining security policies, procedures, and standards</li>
<li>Overseeing the use of security tools and technologies, including SIEM, IDS/IPS, and firewalls</li>
<li>Collaborating with other teams to develop and implement incident response plans</li>
<li>Communicating with senior management and stakeholders regarding security incidents and remediation efforts</li>
<li>Keeping abreast of new security threats and technologies and incorporating them into the organization's security posture</li>
<li>Establish and maintain training plans and conduct ongoing training of ITHRA SOC staff</li>
<li>Providing guidance and mentorship to the ITHRA SOC team members</li>
</ul>
Requirements
<br><br>
<ul>
<li>Bachelor's degree in Computer Science, Cybersecurity or a related field</li>
<li>Certification by one of these organizations (SANS, Offensive Security, eLearn Security)</li>
<li>Minimum of 5 years of experience in the information security field, SOC lead or management role</li>
<li>Well versed with Security operations, Intrusion detection and incident handling</li>
<li>Security monitoring experience with one or more SIEM technologies</li>
<li>Knowledge of current and emerging technologies and processes used within a SOC to improve efficiency and effectiveness.</li>
<li>Strong communication, writing and interpersonal skills. Strong leadership skills with the ability with the ability to prioritize and execute in a methodical and disciplined manner, as well as to set and manage expectations with stakeholders and team members.</li>
<li>Strong understanding of security threats and technologies</li>
<li>Experience with network and host-based security tools</li>
<li>Experience with incident response procedures and regulations</li>
<li>Strong analytical and problem-solving skills</li>
<li>Strong communication and leadership skills</li>
<li>Strong leadership and team management skills</li>
</ul>


Cybersecurity Analyst - SMP Saudi Aramco

VaporVM

<div>
 <p>
  We are seeking a highly skilled and proactive
  <strong>
   Team Lead &ndash; Cybersecurity
  </strong>
  with a strong focus on
  <strong>
   Governance, Risk &amp; Compliance (GRC)
  </strong>
  and
  <strong>
   Security Operations Center (SOC)
  </strong>
  functions. The ideal candidate will be responsible for leading cybersecurity operations, ensuring regulatory compliance, managing organizational risk, and overseeing real-time threat detection and response.
 </p>
 <p>
  This role requires a strategic thinker with hands-on technical expertise who can bridge the gap between compliance frameworks and operational security.
 </p>
 <p>
  <strong>
   Key Responsibilities
  </strong>
 </p>
 <p>
  <strong>
   Leadership &amp; Strategy
  </strong>
 </p>
 <ul>
  <li>
   Lead and mentor the cybersecurity team across GRC and SOC functions.
  </li>
  <li>
   Define and implement cybersecurity strategies aligned with business objectives.
  </li>
  <li>
   Establish security governance frameworks, policies, and procedures.
  </li>
  <li>
   Act as the primary point of contact for cybersecurity initiatives and escalations.
  </li>
 </ul>
 <p>
  <strong>
   Governance, Risk &amp; Compliance (GRC)
  </strong>
 </p>
 <ul>
  <li>
   Develop, implement, and maintain information security policies, standards, and controls.
  </li>
  <li>
   Ensure compliance with international standards such as ISO 27001, NIST, and CIS frameworks.
  </li>
  <li>
   Conduct risk assessments, gap analysis, and risk treatment planning.
  </li>
  <li>
   Manage internal and external audits, including regulatory and client compliance requirements.
  </li>
  <li>
   Oversee third-party/vendor risk assessments and security due diligence.
  </li>
 </ul>
 <p>
  <strong>
   Security Operations (SOC)
  </strong>
 </p>
 <ul>
  <li>
   Oversee daily SOC operations including monitoring, alert triaging, and incident response.
  </li>
  <li>
   Manage and optimize SIEM, SOAR, EDR/XDR, and threat intelligence platforms.
  </li>
  <li>
   Lead incident investigation, root cause analysis, and remediation efforts.
  </li>
  <li>
   Develop and maintain incident response plans, playbooks, and runbooks.
  </li>
  <li>
   Ensure continuous improvement of detection use cases and threat-hunting capabilities.
  </li>
 </ul>
 <p>
  <strong>
   Risk Management &amp; Incident Handling
  </strong>
 </p>
 <ul>
  <li>
   Identify, assess, and prioritize cybersecurity risks across the organization.
  </li>
  <li>
   Lead incident response activities and coordinate with internal and external stakeholders.
  </li>
  <li>
   Conduct post-incident reviews and implement corrective/preventive actions.
  </li>
 </ul>
 <p>
  <strong>
   Reporting &amp; Stakeholder Management
  </strong>
 </p>
 <ul>
  <li>
   Prepare and present security reports, dashboards, and risk posture to senior management.
  </li>
  <li>
   Collaborate with IT, DevOps, Legal, and Compliance teams to ensure integrated security practices.
  </li>
  <li>
   Provide security awareness and training programs across the organization.
  </li>
 </ul>
 <p>
  <strong>
   Required Qualifications &amp; Skills
  </strong>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree in Cybersecurity, Information Security, Computer Science, or a related field.
  </li>
  <li>
   6&ndash;9 years of experience in cybersecurity with strong exposure to both GRC and SOC environments.
  </li>
  <li>
   Hands-on experience with SIEM tools (e.g., Splunk, QRadar, Microsoft Sentinel).
  </li>
  <li>
   Strong understanding of security frameworks (ISO 27001, NIST, CIS Controls).
  </li>
  <li>
   Experience in risk management, compliance audits, and policy development.
  </li>
  <li>
   Solid knowledge of incident response, threat detection, and vulnerability management.
  </li>
  <li>
   Leadership experience managing technical teams.
  </li>
 </ul>
 <p>
  <strong>
   Preferred Certifications
  </strong>
 </p>
 <ul>
  <li>
   CISSP, CISM, or CISA
  </li>
  <li>
   ISO 27001 Lead Implementer / Lead Auditor
  </li>
  <li>
   CEH, CompTIA Security+, or equivalent
  </li>
  <li>
   Microsoft Security / Azure Security certifications (preferred)
  </li>
 </ul>
 <p>
  <strong>
   Key Competencies
  </strong>
 </p>
 <ul>
  <li>
   Strong analytical and problem-solving skills
  </li>
  <li>
   Leadership and team management
  </li>
  <li>
   Excellent communication and stakeholder management
  </li>
  <li>
   Decision-making under pressure
  </li>
  <li>
   High level of integrity and accountability
  </li>
 </ul>
 <p>
 </p>
</div>


Team Lead – Cybersecurity (GRC & SOC)

Premier NX

<div></div><div><div><div><div><div><div><p>The Senior Manager IT &amp; Information Security will be responsible for leading enterprise IT operations and the organization&rsquo;s information security program. This role ensures the confidentiality, integrity, and availability of systems and data while supporting business growth, regulatory compliance, and operational excellence across global delivery centres.</p>
<p>
The role requires a strong balance of <b>IT operations leadership, cybersecurity governance, risk management, and compliance </b>within a fast paced BPO/enterprise services environment.</p>
</div><div><h2 class="jobSectionHeader"><b>
Key Responsibilities</b></h2></div><div><h3 class="jobSectionHeader"><b>
IT Operations &amp; Infrastructure Leadership</b></h3>
<ul><li>Lead day-to-day IT operations, including networks, servers, endpoints, cloud services, and enterprise applications.</li>
<li>Ensure high availability, performance, and scalability of IT systems across all locations.</li>
<li>Own IT service delivery, incident management, problem management, and change management processes.</li>
<li>Collaborate with internal teams and vendors to deliver reliable IT services aligned with business SLAs.</li>
</ul><h3 class="jobSectionHeader"><b>Information Security &amp; Risk Management</b></h3>
<ul><li>Own and continuously improve the organization&rsquo;s Information Security Management Program.</li>
<li>Lead security operations, including monitoring, incident response, investigations, and remediation.</li>
<li>Oversee SOC operations, SIEM, endpoint detection, firewall security, and vulnerability management.</li>
<li>Conduct risk assessments, threat modelling, and security reviews for new systems and vendors.</li>
</ul><h3 class="jobSectionHeader"><b>Compliance, Audit &amp; Governance</b></h3>
<ul><li>Ensure compliance with SOC 2, ISO 27001, client security requirements, and internal policies.</li>
<li>Lead internal and external audits, including evidence collection and remediation tracking.</li>
<li>Maintain and enforce IT and Information Security policies, standards, and procedures.</li>
<li>Support client security questionnaires, due diligence, and regulatory inquiries.</li>
</ul><h3 class="jobSectionHeader"><b>Microsoft 365 &amp; Identity Security</b></h3>
<ul><li>Oversee Microsoft 365 security, identity and access management, conditional access, DLP, and endpoint protection.</li>
<li>Ensure secure configuration and governance of email, collaboration tools, and cloud workloads.</li>
<li>Partner with IT leadership on Copilot, automation, and digital transformation initiatives.</li>
</ul><h3 class="jobSectionHeader"><b>Leadership &amp; Stakeholder Management</b></h3>
<ul><li>Lead, mentor, and develop IT and security team members.</li>
<li>Partner closely with IT leadership, HR, Legal, Compliance, and business stakeholders.</li>
<li>Communicate risks, incidents, and security posture clearly to executive leadership.</li>
<li>Drive a strong security first culture through awareness and training initiatives.</li>
</ul></div><div><h2 class="jobSectionHeader"><b>Required Qualifications</b></h2></div><div><h3 class="jobSectionHeader"><b>
Education &amp; Experience</b></h3>
<ul><li>Bachelor&rsquo;s degree in information technology, Computer Science, Cybersecurity, or related field.</li>
<li>8&ndash;12+ years of progressive experience in IT and Information Security roles.</li>
<li>3&ndash;5+ years in a leadership or management capacity.</li>
</ul><h3 class="jobSectionHeader"><b>Technical &amp; Professional Skills</b></h3>
<ul><li>Strong experience in:
<ul><li>IT infrastructure, networking, and enterprise systems</li>
<li>Cybersecurity operations and incident response</li>
<li>SOC 2 / ISO 27001 compliance and audits</li>
<li>SIEM, EDR, firewalls, vulnerability management</li>
<li>Microsoft 365 security and identity management</li>
<li>Azure and AWS cloud management.</li>
</ul></li><li>Solid understanding of BPO or regulated enterprise environments.</li>
<li>Experience managing third-party vendors and security partners.</li>
</ul><h3 class="jobSectionHeader"><b>Certifications (Preferred)</b></h3>
<ul><li>PMP, Security-related certification, or equivalent</li>
<li>Microsoft Security or Azure certifications</li>
<li>Cloud and network-related certification is a plus</li>
</ul><h3 class="jobSectionHeader"><b>Soft Skills &amp; Attributes</b></h3>
<ul><li>Strong leadership and decision-making ability</li>
<li>Excellent communication and executive-level reporting skills</li>
<li>High sense of ownership, accountability, and integrity</li>
<li>Ability to operate calmly under pressure during incidents</li>
<li>Strategic mindset with hands-on execution capability</li>
</ul></div><div><h2 class="jobSectionHeader"><b>What We Offer</b></h2></div><div><ul>
<li>Market-competitive salary</li>
<li>Career growth opportunities</li>
<li>Learning &amp; development programs</li>
<li>On-the-job training</li>
<li>Medical Coverage (IPD)</li>
<li>Life Insurance</li>
<li>Paid Leaves (Annual, Casual, Sick, Marriage, Maternity, Paternity, Hajj, Bereavement)</li>
<li>Provident Fund</li>
<li>Employee Old Age Benefits (EOBI)</li>
<li>Employee engagement &amp; wellness initiatives</li>
</ul>
</div><div><p><b>Shift: </b>EST (Night)<br>
<b>Work Module:</b> Onsite / Hybrid as per business need<br>
<b>Location: </b>NASTP, Cantt, Lahore.</p></div></div></div></div></div></div><div></div>

Senior Manager IT & Information Security

Marriott Vacations Worldwide

<div>
 <ul>
  <li>
   Relocation assistance provided
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Job Summary
  <br/>
  <br/>
 </strong>
 The
 <strong>
  AVP, Cyber Security Operations
 </strong>
 will be responsible for leading the design, implementation, and continuous enhancement of the organization&rsquo;s security operations capabilities. This role will focus on developing a Security Operations Center (SOC) that ensures proactive monitoring, threat detection, and swift incident response to safeguard the organization&rsquo;s critical infrastructure and digital assets. The individual will be tasked with establishing a robust threat intelligence program that integrates real-time threat data, analysis, and strategic insights to anticipate emerging risks and inform decision-making. A key aspect of this role is creating and nurturing operational processes that allow the SOC to function seamlessly across complex, hybrid environments, including cloud and on-premises systems.
 <br/>
 <br/>
 This leader will be responsible for managing advanced security tools such as SIEM, SOAR, EDR, and threat intelligence platforms, and will leverage these tools to automate workflows, improve incident response times, and drive threat analysis. The role will ensure that security operations are continuously evolving to meet the latest threat landscapes, using an intelligence-driven approach to preemptively mitigate risks. The individual will be instrumental in driving the organization&rsquo;s security incident management framework, ensuring effective resolution, reporting, and post-incident reviews that contribute to future risk mitigation.
 <br/>
 <br/>
 Additionally, the position collaborates closely with business and IT leaders to ensure that security operations are aligned with organizational goals and risk management strategies. This role will also involve working with regulatory and compliance teams to ensure adherence to industry standards, data protection regulations, and cybersecurity best practices.
 <br/>
 <br/>
 <strong>
  Expected Contributions
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   SOC Leadership and Optimization: Leads the continuous improvement and optimization of the Security Operations Center (SOC) to ensure that it is capable of effectively detecting and responding to both external and internal threats. This includes refining SOC processes, tools, and workflows to ensure operational efficiency and responsiveness to security incidents across hybrid environments.
  </li>
  <li>
   Threat Intelligence Integration: Develops and operationalizes a comprehensive threat intelligence program that enhances situational awareness and empowers the SOC with actionable insights. This includes integrating external threat intelligence feeds, leveraging internal threat data, and fostering collaboration with industry groups and threat-sharing communities to stay ahead of emerging threats.
  </li>
  <li>
   Incident Response Management: Oversees the development and execution of incident response plans, ensuring they are tested, documented, and continuously improved. Leads high-impact incident response efforts, coordinating with relevant stakeholders to contain, remediate, and recover from security incidents. Ensures post-incident reviews are conducted to identify gaps and improve the organization&rsquo;s overall security posture.
  </li>
  <li>
   Security Automation and Orchestration: Spearheads the integration of automation and orchestration tools, such as Security Orchestration, Automation, and Response (SOAR) platforms, to streamline and accelerate security operations. Focuses on automating repetitive tasks, improving response times, and reducing manual effort to increase operational efficiency within the SOC.
  </li>
  <li>
   Security Metrics and Reporting: Establishes key performance indicators (KPIs) and metrics to measure the effectiveness of the security operations function. Provides regular updates and executive reporting on security operations performance, including threat detection, incident response timelines, and overall security posture. Uses data to drive improvements and ensure alignment with the organization&rsquo;s risk management strategy.
  </li>
  <li>
   Cross-functional Collaboration: Works closely with technology, legal, compliance, privacy, and business leadership to ensure that security operations are aligned with overall business objectives and regulatory requirements. Facilitates the integration of security considerations into all aspects of the organization&rsquo;s technology infrastructure and processes.
  </li>
  <li>
   Team Development and Mentorship: Fosters a high-performance culture within the security operations team through mentorship, training, and leadership. Supports career development and skills growth for team members, ensuring they are equipped with the latest knowledge and tools to handle evolving threats. Builds a culture of continuous learning to keep the team ahead of the curve in security operations and threat management.
  </li>
  <li>
   Risk and Compliance Alignment: Ensures that the security operations function meets relevant regulatory requirements and aligns with industry standards (e.g., NIST, ISO 27001, GDPR). Works with compliance and legal teams to ensure that incident response efforts, threat intelligence, and SOC activities support the organization&rsquo;s broader compliance goals.
  </li>
  <li>
   Technology and Tool Selection: Evaluates, selects, and implements security technologies that support the security operations program. This includes SIEM, EDR, threat intelligence platforms, and other tools that enhance detection, monitoring, and response capabilities. Ensures these tools are integrated seamlessly into the organization&rsquo;s broader security architecture.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Candidate Profile
  <br/>
  <br/>
 </strong>
 <strong>
  Education
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor of Science (BS) degree that is technology based in information technology, engineering, computer science, or statistical/math sciences required.
  </li>
  <li>
   Master&rsquo;s degree, e.g., MBA or in Computer Science, preferred.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Certifications Preferred
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Advanced certifications such as CISSP, CISM, GIAC (e.g., GCIA, GCFA, GCIH), or CEH preferred.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Experience
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   At least ten years of progressive experience in relevant Information Security positions.
  </li>
  <li>
   At least six years of experience in a security engineering role or a similar position or having equivalent skills and experience
  </li>
  <li>
   Proven experience managing hybrid SOCs (in-house and MSSPs), and leading global or enterprise-scale security operations.
  </li>
  <li>
   Demonstrated expertise with tools and technologies such as SIEM, SOAR, EDR, and threat intelligence platforms.
  </li>
  <li>
   Experience managing incidents and crises in dynamic environments.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Skills/Attributes
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Deep understanding of incident response methodologies, threat detection, and forensics practices.
  </li>
  <li>
   Expertise in modern IT architectures, including hybrid cloud environments, containers, and APIs.
  </li>
  <li>
   Strong knowledge of security frameworks and standards (e.g., NIST CSF, MITRE ATT&amp;CK, ISO 27001).
  </li>
  <li>
   Exceptional analytical and critical thinking skills with the ability to make critical decisions under pressure.
  </li>
  <li>
   Strong leadership, collaboration, and interpersonal skills, with the ability to influence at all levels of the organization.
  </li>
  <li>
   Effective communicator with the ability to translate complex technical details into actionable insights for diverse audiences.
  </li>
  <li>
   Ability to develop and mentor security operations teams, fostering a culture of continuous learning, skill development, and high-performance standards to stay ahead of evolving threats.
   <br/>
   <br/>
  </li>
 </ul>
 Marriott Vacations Worldwide is an equal opportunity employer committed to hiring a diverse workforce and sustaining an inclusive culture.
</div>


AVP, Cyber Security Operations*

Search 10000+ Soc manager jobs near you this April. New roles added regularly across leading industries. Apply today.