About the Role
We are partnering with a global financial services organization as they continue to mature and modernise their cyber security operations capability. This newly shaped SOC Lead role will play a critical part in strengthening how the organization detects, responds to and recovers from cyber threats across its global environment.
This is a hands‐on leadership role sitting close to the tools, the people and the incidents. You'll lead the hybrid 24/7 SOC activity, influence operational strategy and act as the bridge between internal teams and external security partners.
What's a typical day look like?
- Lead the day-to-day operations of a hybrid 24/7 SOC
- Oversee threat detection, incident response and threat hunting across global regions
- Collaborate with external MSSP partners, aligning on SLAs, KPIs and threat intelligence sharing
- Design and implement SOC processes, playbooks and metrics to measure operational maturity
- Lead incident response lifecycle - detection, containment, eradication and recovery
- Drive continuous improvement initiatives, leveraging automation and AI
- Ensure alignment with frameworks including NIST, SOC 2 and MITRE ATT&CK
- Provide leadership and mentorship to SOC analysts and engineers
- Challenge existing processes, identify gaps and drive operational enhancements
About you
- 5+ years' experience in Cyber Security Operations or SOC management roles within Financial Services
- Strong understanding of threat modelling, incident response and adversary tactics (TTPs)
- Proficiency with SIEM, SOAR and threat intelligence platforms
- Experience managing hybrid SOC environments and external MSSP partnerships
- Hands‐on understanding of network, endpoint, identity and cloud security (especially Azure/M365)
- Familiarity with automation/scripting (Python, PowerShell) and use of AI tools to optimise SOC workflows
- Knowledge of key frameworks - MITRE ATT&CK, NIST, SOC 2
- Experience integrating Active Directory, SSO (Single-Sign On)
- Proven leadership and communication skills, with the ability to engage across technical and executive levels.
- Experience working within a global environment
- Relevant certifications such as CISSP, CISM, GCIA, GCIH, CSA (highly regarded)
- Must be an Australian Citizen or Permanent Resident
Apply now
or reach out to Shannon Stobbs at to find out more!
Kapital Consulting is a niche Fintech Recruitment Business specialising in Technology, Project Services and Data Recruitment across Australia. For more information connect with us on www.kapitalconsulting.com.au and follow us on www.linkedin.com/company/kapital-consulting
Cyber Security Operations Lead employer: Kapital Consulting
Our Client is an exceptional employer, offering a dynamic work culture that fosters innovation and collaboration in the rapidly evolving field of AI within Financial Services. Employees benefit from comprehensive growth opportunities, including hands-on experience with cutting-edge technologies and the chance to contribute to impactful projects that shape the future of finance. Located in a vibrant area, the company promotes a healthy work-life balance and encourages a supportive environment where every team member's contributions are valued.
