The Security Operations Team Lead will be responsible for managing the day-to-day activities across all areas of Security Operations.
Key Duties and Responsibilities:
Be the mainstay for Security Operations issues within SFIT.
Security Operations
- Day to day responsibility of the security operations team of less than 5 staff; retain functional management responsibilities for 2 members of staff, and functional and hierarchical management responsibilities for 1.
- Be the point of escalation of any security operations issues.
- Manage and implement relevant CTI into SecOps practises, sharing as needed.
- Clearly communicate and escalate risks and issues as or before they occur to the appropriate reporting chain.
- Respond to threats and alerts whilst remaining calm under pressure.
- Liaise with group CERT and other partners as required.
- Manage Security Operations projects throughout the year to ensure completion on time.
Shape the function.
- Manage the SIEM; be aware of blind spots and how this influences the COP (Common Operating Picture)
- Recommend continuous areas of improvement across full security function.
General
- Familiar with compliance frameworks such as GDPR, ISO 27001, Cyber Essentials and various NIST frameworks
- Educate colleagues on security topics as needed.
- Respond to queries from other SFIT teams and other colleagues on the breadth of security operations topics.
- Promote culture of security by design' across all aspects including projects
- Remain current with new privacy, compliance, and regulatory legislation and changes and the impact this may have to the organisation.
Keep abreast emerging technologies within the IT space
Dimensions and Limits of Authority:
Scope and autonomy to recommend changes to all aspects of security within Security Operations.
Escalation point for Incident Response
Qualifications:
Essential:
GCSE passes in English, Mathematics, and a science.
A-Level Passes or equivalent in Computing.
Desirable:
Degree or equivalent Business Experience.
Technical Certifications (SANS/CompTIA/OffSec)
Experience:
Essential:
Knowledge of compliance and other frameworks/regulatory requirements.
Excellent stakeholder management.
Excellent documentation and organisation skills.
Ability to work under pressure to achieve objectives.
Desirable:
Project Management
Passionate about mentoring/training individuals.
French or Spanish speaker
Worked within MOD or HMG
HackTheBox/ImmersiveLabs/TryHackMe account
Home lab
VINCI Construction is focused on buildings, structures and infrastructure that improve
the living environment, mobility and economic competitiveness of the regions it works in.
VINCI Construction in the UK is formed of three complementary components;
Major Projects, Specialty Networks and Proximity Network businesses.
Our buildings, civil works and infrastructure enhance life for local people. Acting as a positive force for all, we build structures to accompany the transitions of our era – environmental, energy and digital. Steeped in a culture of builders, our teams strive and innovate every day to assist our customers as well as the end-users.
About SFITUKSFITUK is the internal IT company for a large global construction company that specialises in soil, structural and nuclear engineering operating in over 100 countries. But we're more than one of the worlds leading construction companies. At SFITUK we're dedicated to building a culture that is a Great Place to Work. Where you are empowered to push the boundaries of your knowledge and skills in Information Technology to help unleash your full potential. There is no better place to work in within IT in the North West that will offer you challenges and opportunities that are part of a leading global organisation to keep you challenging yourself during your career at SFITUK. SFITUK is an inclusive culture that champions diversity and collaboration and are committed to lifelong learning, growth and development of all of our team.
