
SOC Security Service Delivery Manager
- Birmingham
- Permanent
- Full-time
- Act as a bridge between the Customer and the Operational Delivery Teams
- Act as a primary escalation point of contact to the customer
- Coordinate the Security Operations, Incident Response Teams and other technical resources needed to troubleshoot major incidents to determine the affected/vulnerable systems, affected/vulnerable users
- Identify any business areas impacted and coordinate communications with all relevant stakeholders as per Major Incident Management process.
- Coordinate the remediation and containment activities as advised by either the NTT DATA SOC or Incident Response Team.
- Oversee, support, and manage through to completion the investigative and remediation activities in conjunction with relevant support teams.
- Coordinate post incident investigation with relevant teams or third parties and document the appropriate report to be provided to the customer
- Provide support and guidance to NTT DATA Delivery Teams and ensure compliance with the agreed Service Level Agreements (SLAs), quality standards, and client expectations.
- Document and present to the customer the weekly and/or monthly service review reports.
- Support Senior Service Delivery Manager in review of any service delivery processes and workflows, identifying areas for optimization and implementing best practices.
- Co-ordinate the running and reporting of a risk-based vulnerabilities management including:
- Scanning systems, networks, and applications to detect potential security weaknesses.
- Prioritize vulnerabilities based on their risk level, potential impact, and the criticality of the affected assets, ensuring that high-risk vulnerabilities are addressed first.
- Work with the Customer Business Owners to ensure they fully understand the risks, and can effectively coordinate the recommended remediation
- Oversee the upkeeping of the intrusion detection system (IDS) and intrusion prevention system (IPS) signatures for customer’s security gateways and Firewalls.
- At least 10 years of experience in providing technical support and advice for a Security Operations Centre
- Demonstrate in-depth knowledge of Security incident Management and Security Operations.
- Excellent communication and client relationship skills to interface with clients, stakeholders, and senior leadership.
- At least 5 years’ experience in providing Vulnerability Management Services
- Demonstrable experience and knowledge in supporting and managing IDS & IPS technologies
- Significant experience and ability to manage and lead in crisis situations, ensuring a swift and effective response.
- Demonstrable experience in leading and coordinating diverse teams effectively.
- A valid right to work in the UK.
- Have held UK SC clearance or be eligible for obtaining UK SC clearance.
- Excellent English writing skills for technical documents and improving processes (such as policies and reports).
- Outstanding English verbal communication skills with the ability to explain things in a clear and non-technical way.
- Strong attention to detail and the ability to deliver high quality work.
- A relevant and recognised professional Security / Risk / Compliance certification supporting the role, such as CISSP, CICM, GCIH, etc.