JOB TITLE: SOC Manager

WORK SET UP: Hybrid/Onsite in Quezon City, Cyberpark Tower 1 and Cebu City

WORK SHIFT: Shifting

Note: (Salary is confidential and the final salary offer will depend on the client and project they will be assigned)

Job Summary:

The primary objective of the SOC Manager is to manage SOC operations for our external clients, in transition of service and/or in the run-phase of the service. This role is responsible to drive the day-to-day SOC operations to defend corporate networks from advanced and targeted attacks by providing threat monitoring and cyber defense services. The SOC Manager will work with the SOC Operations team with a focus on threat identification, incident response, cyber threat intelligence infusion, and mitigations—to ensure defensive resiliency.

SOC Manager Job Requirements:

• Bachelor or college degree in Computer Science, Telecommunications or Information Security or equivalent work experience

• At least 10 years of experience an information/cyber security role focused on security monitoring and analysis

• Knowledge of IT security solutions (Security Information and Event Management, Cloud Access Security Broker, Data Leakage Prevention, Web Application Firewall, Multi Factor Authentication, Data Rights Management, Identity Access/Privileged Access Management, etc.)

• At least 3 years of experience in leading teams of varying sizes teams of varying sizes and resource management

• Extensive experience of working directly with client stakeholders as a single point of contact, managing escalations and driving remediation initiatives

• Understanding of frameworks such as ISO 27001/27002, COBIT, and other relevant compliance such PCI, HIPAA, SOX, FISMA

• Experience with and knowledge of Data Loss Prevention (DLP)

• Either possess (or have the eligibility to obtain) a Canadian security clearance

• English is required for this position as this role will regularly interact with stakeholders across Canada, US and other countries across our Global footprint where English is the common language. Due to the significant high volume of interactions with these English-speaking stakeholders, which is inherent to this position, it is not possible to reorganize the company’s activities to avoid this requirement.

Key Responsibilities:

• Act as service delivery manager and Subject Matter Expert (SME) to the SOC team during the run phase of the service

• Providing subject matter expertise and guidance on Sentinel design, implementation, log sourcing integration, UseCase development and troubleshooting

• Providing subject matter expertise and guidance on incident response management and coordinating efforts across client and Accenture teams

• Managing escalations, managing Daily Operations, resources, incident management and

• Reporting and review of contractual metrics – KPI/SLA

• Implement & support security for client environments, including the implementation of technological solutions

• Participate in business development activities (including responses to RFP/I/Q)

• Champion continuous service improvement and drive automation efforts

• Contribute to people-related activities, including development, coaching, recruiting, training, and retention. Foster a culture of learning, continuous improvement

• Open for those applicants who are currently in the Philippines and already have the right to live and work in this country are eligible for this role

 

Nice to have skills:

• Certifications in public cloud (level of architect, security engineer/specialist) or Security Certifications in CISSP, CISM, CCSP or CCSK, CEH, CISA, Azure Security Engineer, Azure Solution Architect Expert, AWS Solution Architect Associate/Professional

• Familiarity with industry standards, guidelines, and regulatory compliance requirements related to information security and cloud computing such as GDPR, ISO 27001, Cloud Security Alliance, NIST 800-53, PCI DSS, ISA/IEC 62443, NERC CIP, HIPAA, etc.

• Scripting experience using either Shell, Python, Perl, JavaScript, PowerShell, Azure-CLI, AWS-CLI, GCP CLI, etc.

• Certifications for product or vendor security solutions such as: AZ-500, SC-200

• Knowledge of public cloud environments (Azure, AWS or Google Cloud), preferred to currently possess foundational certification

Additional Requirements:

• Must be willing to work on a shifting schedule and report 3x a week to daily onsite at Cyberpark, Cubao, Quezon City or Ayala IT Park, Metro Cebu