What does An IT Security Operations Manager do?
An IT Security Operations Manager is responsible for leading and managing the Security Operations Centre function, owning the SOC operating model, SIEM tooling strategy, and team performance metrics to deliver 24/7 threat detection and incident response.
Day-to-day responsibilities
- Leading and developing the SOC team of analysts and security engineers
- Managing major security incident response and post-incident reviews
- Overseeing SIEM platform performance and detection quality
- Producing SOC performance metrics and board reporting
- Engaging with threat intelligence providers
- Managing MSSP partner relationships
Low demand+18% SOC management+20% incident response management+16% SIEM platform management