Cyber Operations Manager

Cyber Operations Manager - London
Salary: £95,000-£110,000 | Hybrid working | Permanent

Location: London
Salary: £95,000-£110,000, depending on experience
Hybrid: 3 days in the office and 2 days remote (minimum 60% onsite)
Contract: Permanent

An exciting opportunity for a technically strong Cyber Operations Manager to join a leading global law firm and take ownership of its day-to-day cyber security operations.

This is a hands-on leadership role where you'll oversee security monitoring, incident response and detection engineering, while driving improvements across the wider security environment. You'll play a key role in developing the team's capabilities, strengthening security controls and ensuring the organisation is well equipped to identify, respond to and mitigate cyber threats.

Key responsibilities:

• Lead and develop a cyber security operations team, providing technical guidance, mentoring and support.
• Take ownership of security incidents, coordinating investigations, containment and recovery.
• Improve security monitoring, SIEM detections, threat hunting and incident response playbooks.
• Oversee security controls across Azure, Entra ID, endpoint and email security, identity management and vulnerability management.
• Manage outsourced security providers, ensuring effective service delivery and continuous improvement.
• Work with internal stakeholders to strengthen security practices and embed security into technology projects.

What we're looking for:

• At least five years' cyber security experience within a regulated environment, ideally legal, professional services or financial services.
• Proven experience leading and developing a cyber security operations team.
• Strong technical expertise in security operations, incident response and detection engineering.
• Experience with cloud security, particularly Microsoft Azure and Entra ID, alongside SIEM and endpoint security technologies.
• Strong stakeholder management and communication skills, with the ability to explain technical risks to non-technical audiences.
• Relevant qualifications such as CISSP, CISM or GIAC would be advantageous.

Experience with managed SOC services, security automation, purple teaming or transforming security operations would also be beneficial.

The opportunity: A great role for an experienced cyber security professional looking to combine technical expertise with team leadership, taking a proactive approach to improving security operations within a complex, international environment.