Head of Cyber Defence (SecOps)

The scope of responsibilities includes the following:

• Lead and manage a team of 4–5 security analysts, as well as external MSSPs and SOC providers.

• Own and continuously enhance threat detection, investigation, and response processes using modern tooling and automation.

• Oversee real-time threat monitoring, threat hunting, and incident triage to identify and mitigate risks promptly.

• Develop and integrate proactive threat intelligence into SecOps processes and security technologies.

• Serve as a key escalation point (role of SIRM) for security incidents and lead incident response, root cause analysis, and post-incident reporting.

• Lead the continuous improvement of detection rules, correlation logic, and threat-hunting techniques across SIEM and EDR platforms.

• Collaborate with Cloud, DevOps, and IT teams to ensure security is embedded in enterprise systems and media production workflows.

• Stay ahead of emerging threats, TTPs, and relevant threat actor campaigns, especially those targeting the media industry.

• Define, track, and report operational metrics and KPIs to senior leadership.

• Ensure compliance with relevant frameworks, standards, and regulations (e.g., NIST, ISO/IEC 27001, GDPR, SOC 2).

• Work with Infrastructure teams on the design, implementation, and maintenance of security solutions, including firewalls, intrusion detection systems, encryption technologies, and identity management systems.

• Establish and regularly test incident response playbooks, escalation procedures, crisis management processes, and recovery plans.

• Cyber Threat Intelligence:

  • Lead efforts to continuously monitor the threat landscape and provide timely insights on emerging threats and vulnerabilities.

  • Build relationships with external stakeholders, including threat intelligence sharing communities, government agencies, and security vendors, to strengthen organisational defences.

• Own and manage relevant security contracts, procurement activities, and projects, including collaborating with other teams to implement and roll out new tools under the Cyber Defence Team.

• Perform other duties as assigned by the CISO.