Head of Security Operations | OT-ICS
Lead the next phase of a SOC that's already earning trust.
SIS Industrial Cyber Security runs a 24x7 OT-SOC trusted by critical infrastructure and industrial clients across Asia Pacific and the Middle East. Client demand is growing, and this role leads the SOC's next phase of growth.
You'll grow the team, improve how the SOC detects and responds to threats, and shape the standards and culture it runs on as it takes on more clients and complexity. You'll coach and mentor the analysts and delivery partners who make the service work, building the capability that keeps SIS at the forefront OT/ICS talent.
SIS doesn't chase volume. Our reputation is built on technical depth and outcomes that hold up under engineering, operational, and executive scrutiny. This SOC is a strategic priority for the business, and you'd be leading its next stage of growth.
The Role
You'll lead the SOC's operations, technology, and detection engineering, and support pre-sales for managed services deals. You'll manage in-house analysts and outsourced SOC partners and, be the technical voice clients trust when something goes wrong in their OT environment.
This is a leadership role for someone who still wants their hands on the technical detail, not just oversight from a distance.
What You'll Be Doing
Scale SOC operations, detection use cases, and playbooks as client demand grows
Own 24x7 monitoring, detection, and incident response across OT/IT client environments
Direct the SOC's technology stack and detection engineering roadmap (SIEM, SOAR, OT/ICS intrusion detection)
Coach, mentor, and develop a blended team of in-house analysts and outsourced partners
Lead incident response for confirmed, high-consequence incidents in industrial environments
Support pre-sales and solution design for new managed services clients
Represent the SOC's capability and credibility to clients, at engineering and executive level
What We're Looking For
Genuine OT/ICS cyber security credibility: this is not a generic IT SOC background
Proven SOC leadership experience, including team and vendor management
Comfortable operating at both the technical coalface and the commercial/pre-sales table
A genuine coach and mentor: invested in developing the people and partners who deliver the service
Strong stakeholder management: trusted by clients' engineering and executive teams alike
Experience across SIEM, EDR, NDR and OT monitoring platforms (SCADA, industrial networks, energy systems)
Energised by scaling a capability that already works, not just maintaining it
Why SIS
A proven specialist: 100% dedicated to OT / industrial cyber security, trusted in critical infrastructure delivery
Real influence: shape the SOC's culture, standards, and approach as it scales
Credibility that matters: our work is valued because it stands up to engineering, operational, and executive scrutiny
Regional scale with focus: delivery across Asia Pacific and the Middle East without losing specialist depth
Sustainable excellence: success built on quality and accountability, not volume or hype