Assistant Vice President, GT-Cyber Security Defence Centre (Senior Specialist-SOC Manager)

Job Purpose *
Security Operations Center Manager is responsible for overseeing 24×7 SOC operations, ensuring effective security monitoring, timely alert triage, and appropriate escalation of potential cybersecurity incidents.

The role provides leadership and operational governance across the SOC, including analyst performance, service delivery, incident coordination, reporting, and continuous improvement of SOC processes and capabilities, in support of organizational and regulatory requirements.
Job Description *
1. Manage and continuously improve SOC operational capabilities across in-house and outsourced resources to ensure effective 24×7 monitoring, alert triage, escalation, and operational support.
2. Lead day-to-day SOC operations, ensuring cybersecurity alerts are identified, assessed, prioritised, investigated, and escalated appropriately based on severity, risk, asset criticality, and business impact.
3. Oversee SOC service performance, including shift coverage, operational discipline, service quality, SLA fulfilment, analyst performance, and escalation effectiveness.
4. Establish and maintain SOC processes, procedures, investigation playbooks, shift handover practices, escalation criteria, and operational workflows.
5. Monitor SOC KPIs and operational trends, identify gaps, and drive improvements in monitoring effectiveness, alert quality, response time, and analyst productivity.
6. Coordinate with CERT, Cyber Threat Intelligence, Threat Hunting, SOC Engineering, technology teams, and relevant stakeholders on incident escalation, detection improvement, and operational follow-up.
7. Develop SOC analyst capability through training, coaching, and reinforcement of monitoring procedures, investigation practices, escalation requirements, security tools, and shift handover standards.
8. Ensure SOC operations comply with applicable regulatory, internal policy, governance, and information security requirements, including continuous and proactive monitoring obligations.
9. Prepare and present SOC operational reporting to management, covering alert trends, SLA performance, major escalations, operational risks, service quality, and improvement initiatives.

Job Specification *
Qualifications
(Basic Degree/Diploma etc) Bachelor's Degree or professional qualification in Information Technology, Cybersecurity, Computer Science, Information Security, or a related discipline.
Professional Qualification and/or Regulatory, Licensing requirements • Relevant security certifications such as CISSP, CISM, GIAC, CEH, CompTIA Security+, or equivalent are preferred.
• Networking certifications such as CCNA, CCNP, or equivalent are an added advantage.
Relevant Work Experience • Minimum 7 years of relevant cybersecurity operations experience, including SOC operations, incident response, threat hunting, cyber threat analysis, or cyber threat intelligence.
• Minimum 3 years of SOC leadership or supervisory experience, with demonstrated people-management responsibilities.
• Experience in banking, financial services, telecommunications, or other regulated environments is an added advantage
Key Dimension of Impact *
This section determines the significant quantities on which the job has some direct and indirect impact. Thus, please provide numerical data which gives a feeling for the scope and the scale of the job. Eg,
Financial: Annual budgets, cost, annual turnover, AUM, sales turnover etc
Non-financial:significant volume associated with the job
Required Competencies and Skills *
Competencies/Skills
(Essential to succeed in this job)
Technical/Functional skills
• Strong understanding of SOC operations, including 24×7 monitoring, alert triage, incident escalation, shift management, investigation workflow, and operational reporting.
• Good knowledge of enterprise IT and security technologies, including Windows/Linux, Active Directory, firewalls, proxies, endpoint security, SIEM, IPS, DNS security, and cloud security logs.
• Experience in improving SIEM use cases, detection logic, SOC playbooks, incident response procedures, dashboards, and operational processes.
• Familiarity with cybersecurity frameworks and regulatory expectations, including MITRE ATT&CK and technology risk management requirements.
• Strong ability to assess SOC performance, monitor service levels, identify operational gaps, and drive continuous improvement.
• Strong analytical, prioritisation, decision-making, and communication skills.

Personal skills (Soft Competencies [Core/Leadership])
• Strong leadership and people-management capability, with the ability to supervise analysts and manage competing priorities.
• Effective stakeholder management across internal teams, vendors, service providers, and management.
• Strong planning, organization, and coordination skills.
• Results-oriented, accountable, and able to work independently.
• Strong teamwork and relationship-building skills.
Travel Requirements (if any)
Frequency
(Incl typical Destinations and Duration) Travel within Klang Valley. Is-and-when required