The SOC & Managed Risk Manager is responsible for leading and overseeing the Security Operations Center (SOC) and Managed Risk Services functions in a multi-tenant managed security environment.

This role ensures the efficient delivery of 24/7 threat detection and incident response while also managing vulnerability, risk, and compliance monitoring for multiple enterprise clients.

The position requires a balance of technical SOC leadership, client engagement, and risk management oversight, ensuring service excellence and continuous security improvement for all clients.

Key Responsibilities

=============

1. SOC Operations & Incident Management

Lead day-to-day SOC operations across multiple clients, ensuring proactive monitoring, detection, and response to cyber threats.
Manage the SOC team (Tier 1–3 Analysts, Threat Hunters, and Incident Responders) to meet service SLAs and maintain quality standards
Oversee incident triage, escalation, and post-incident reviews (PIR) with clients and internal teams.
Continuously improve detection rules, playbooks, and SOAR automation workflows.

2. Managed Risk Operations

Oversee vulnerability management services including scanning, assessment, and remediation tracking across client environments
Manage the delivery of Managed Risk services, such as: Vulnerability Assessment & Reporting, Risk Scoring & Prioritization, Patch Management Advisory, Continuous Attack Surface Monitoring, Ensure all risk-related deliverables meet client expectations and align with contractual SLAs, Correlate SOC findings with vulnerability and risk data to provide clients with holistic security insights.

3. Client Relationship & Reporting

Act as a key point of contact for clients for both SOC and Managed Risk services
Deliver monthly and quarterly reports on incident trends, vulnerabilities, risk posture, and security improvement recommendations
Conduct regular review meetings with clients (QBR – Quarterly Business Reviews)
Work with sales and pre-sales teams to identify new opportunities for service expansion.

4. Threat Intelligence & Risk Correlation

Integrate threat intelligence feeds into both SOC detection and risk assessment workflows
Use analytics to correlate active threats with vulnerable assets to prioritize response
Maintain awareness of emerging threats, CVEs, and global cybersecurity trends that may affect clients.

5. Quality, Governance, and Compliance

Maintain up-to-date documentation for SOC and Managed Risk processes (SOPs, SLAs, and Runbooks)
Ensure compliance with international standards such as ISO 27001, ISO 20000, NIST CSF, and CIS Controls
Support internal and client-facing security audits
Implement continuous improvement programs to enhance service quality and efficiency.

6. People & Capability Management

Train and develop team members in both SOC and Risk Management disciplines
Manage certifications and skill development plans for analysts and risk consultants
Foster a culture of proactive defense, collaboration, and innovation.

Job Requirements:

Bachelor's / Master's degree in Computer Science, Information Security, or related field in Cybersecurity Management, Risk Management, or IT Governance is an advantage
Experience minimum 5–10 years of professional experience in cybersecurity, with at least 3 years in SOC management and 2+ years in risk or vulnerability management
Proven experience managing multi-tenant environments within an MSSP or large enterprise
Strong understanding of: SIEM, SOAR, and EDR platforms, Vulnerability management tools (Tenable, Qualys, Rapid7, etc.), Risk frameworks and methodologies (ISO 27005, NIST RMF, FAIR)
Strong leadership and team-building skills across multi-disciplinary teams
Excellent client communication and executive presentation ability
Strategic mindset with hands-on problem-solving skills
Able to prioritize and manage multiple client engagements simultaneously.
High emotional intelligence and stakeholder management capability

Hold Certifications (Preferred):

================

Core Security:

CompTIA Security+, CEH, or GCIH

CISSP / CISM / CRISC (strongly preferred)

GIAC (GCIA, GCFA, GRID)

IT SOC / MDRR Manager