- Company Name
- WestJet
- Job Title
- Manager, Security Operations Centre
- Job Description
-
**Job title**
Manager – Security Operations Centre (SOC)
**Role Summary**
Lead the 24/7 SOC to deliver advanced threat detection, incident response and continuous improvement of security operations. Own the SOC service roadmap, manage an MSP, and drive alignment with enterprise monitoring, incident management and compliance frameworks while providing people leadership to a team of 15‑24 specialists.
**Expectations**
– Deliver secure, high‑availability SOC services that meet contractual KPIs and align with corporate cybersecurity strategy.
– Enhance incident detection, response (MTTD/MTTR) and threat‑hunting capabilities through continuous backlog improvement.
– Lead cross‑functional partnerships with ITIL, Major Incident Management, Disaster Recovery, Business Continuity and enterprise monitoring teams.
– Apply cybersecurity frameworks (NIST CSF, ISO 27001/27002, PCI‑DSS, ITIL) to SOC processes and performance metrics.
– Foster a high‑performance team culture, coaching, performance management, and a 24/7 on‑call rotation.
**Key Responsibilities**
1. Operate and steer the SOC 24/7/365, ensuring detection, response, and resolution of all cybersecurity incidents.
2. Own and execute the SOC service roadmap, prioritising initiatives that support business and security objectives.
3. Maintain a continuous improvement backlog; partner with Cybersecurity teams to enhance detection, response and threat hunting.
4. Manage relationship with the MSP (day‑to‑day operations, resourcing, performance, KPIs, escalations).
5. Collaborate with Major Incident Management, IT Service Desk, IT Operations Centre, and Enterprise Monitoring to improve operational alignment.
6. Drive business‑ and security‑led process improvements, reporting on MTTD, MTTR, and other KPIs.
7. Ensure SOC processes meet industry standards and regulatory frameworks (NIST, ISO, PCI‑DSS, ITIL).
8. Design, deliver, and update CSIRT training and awareness programs.
9. Align SOC incidents with broader enterprise processes (Major Incident, DR, BC).
10. Lead, coach, and develop a team of 15‑24 SOC analysts and support staff.
11. Participate in on‑call rotation to support operational incidents and SOC continuity.
**Required Skills**
- Leadership and people management (team coaching, performance reviews).
- Decision‑making and stakeholder engagement in fast‑paced environments.
- Expertise in SOC operations, incident response, threat hunting, and continuous monitoring.
- Experience managing third‑party/managed service providers.
- Strong grasp of cybersecurity frameworks (NIST CSF, ISO 27001/27002, PCI‑DSS) and ITIL service management.
- Technical proficiency in security monitoring tools, SIEM, SOAR, and observability platforms.
- Ability to translate security metrics into actionable performance improvements.
**Required Education & Certifications**
- Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).
- 3–6 years in cybersecurity operations, security monitoring, or incident response.
- Proven experience leading 24/7 security services.
- Certifications: SAFe, POPM, CISSP, or CISM.
---