Security Operations Centre (SOC) Manager Location: Iraq, Baghdad The SOC Manager will be responsible for overseeing the day-to-day operations and strategic direction of the Security Operations Centre (SOC). This role involves leading a team of security professionals, developing, and implementing security strategies, and ensuring the SOC's effectiveness in detecting, responding to, and mitigating security threats ensuring a proactive approach to cyber defence. Requirements and Responsibilities
Align SOC activities with the organization's overall security strategy.
Develop and maintain playbooks and procedures for various security scenarios.
Work and coordinate with other managers within the Security centre
Manage a team of security analysts and professionals.
Assign tasks, set performance expectations, and promote professional development by establishing clear performance metrics and KPIs for the SOC team.
Develop and implement incident response plans.
Coordinate with stakeholders for timely and effective incident resolution.
Select, implement, and manage security monitoring tools and technologies.
Ensure the SOC has the necessary capabilities to detect, analyze, and respond to security incidents.
Establish and enforce security policies, procedures, and guidelines.
Ensure compliance with regulatory requirements and industry best practices (e.g., PCI DSS, HIPAA, etc.).
Providing a realistic overview of risks and threats to senior management.
Lead the incident response process, including investigation containment, eradication, and recovery from security incidents.
Ensuring SLA compliances, process adherence and process improvement.
Qualifications
A minimum of bachelor’s degree in computing and related field
7+ years of experience in the information security field, with at least 3+ years in a leadership or management role.
Certifications such as CISSP, CISM, or GIAC is highly desirable.
Advanced knowledge of best practices in Information systems security.
Strong understanding of security information and event management (SIEM) and security orchestration, automation, and response (SOAR) tools. Both open and closed sources.
Strong understanding of endpoint detection and response (EDR), extended detection and response (XDR) and managed detection and response (MDR) solutions.
Excellent management skills, communication skills and security fundamentals.
Knowledge of common security threats, vulnerabilities, and attack vectors.
Strong commitment to continuous learning and professional development
Experience managing outsourced SOCs
Cloud experience: certifications in Azure, AWS, etc., are a plus
Additional Technology Stack Considerations: Familiarity and or competency in the following