Executive Director, Security Operations Center

View full description

Requirements:

• 10+ years of experience in enterprise security, with a strong focus on operational security.
• 5+ years of leadership experience managing large, highly technical security operations teams.
• Proven track record in building and optimizing Security Operations Centers in complex, multinational organizations.
• In-depth knowledge of threat detection, adversary tactics, tools, and techniques, as well as the broader threat landscape.
• Expertise in incident response, including triage, containment, eradication, and recovery.
• Hands-on experience with SOC tools and technologies such as SIEM, EDR, SOAR platforms, and advanced analytics.
• Background in offensive security roles (e.g., red team operations), providing insights into attacker methodologies.
• Exceptional ability to build, mentor, and lead diverse technical teams across global locations.
• Strong collaboration skills with cross-functional teams, including IT, legal, and executive leadership, to align security strategies with organizational goals.
• Excellent verbal and written communication skills, with the ability to present complex technical issues to both technical and non-technical stakeholders.
• Experience providing executive-level reporting on security metrics, incident analysis, and risk assessments.
• Relevant certifications such as CISSP, GCIH, GCIA, OSCP, or equivalent credentials.

Responsibilities:

• Develop and lead a world-class, Security Operations Center (SOC) through attracting, retaining and developing top-tier talent and fostering a culture of excellent and continuous improvement.
• Cultivate a culture of proactive threat detection, rapid response, and operational excellence within the SOC. Empower the team to drive efficiency and effectiveness, acting as a trusted advisor to the business on security matters.
• Oversee all aspects of SOC workforce enablement, including strategic resources planning, budgeting, performance management, and professional development programs for the Security Operations and Incident Response teams. Ensure the SO is appropriately staffed and equipped to meet the evolving needs of the business, maintaining 24/7/365 operational readiness.
• Foster a culture of continuous improvement, technical excellence, and proactive threat management.
• Manage SOC staffing, training, and development to ensure readiness for evolving threats.
• Define and execute the SOC's strategic roadmap, aligning with enterprise security and business objectives.
• Oversee the design, implementation, and optimization of SOC workflows, processes, and tools to enhance detection and response capabilities.
• Lead efforts to identify and remediate active threats, leveraging deep technical expertise and advanced methodologies.
• Drive the development of detection strategies for evolving adversary tactics, techniques, and procedures (TTPs).
• Supervise complex incident investigations and response, ensuring proper containment, eradication, and recovery.