Are you ready to lead the evolution of cyber defence at one of the UK’s leading Universities?
Your leadership will be instrumental as Man Met embarks on a major security and risk transformation programme—building a resilient, agile, and forward-looking security capability that supports innovation across the University.
Manchester Metropolitan University is seeking an experienced and motivated Security Operations Centre (SOC) Manager to lead and develop our Cyber Security Operations function. In this pivotal role, you’ll guide a talented team to detect, investigate, and respond to threats across a diverse and complex digital estate.
You’ll shape the direction of our security operations, optimise the use of key platforms, develop our threat management approach, and drive improvements in our incident response and vulnerability management capabilities. You’ll also take the lead in developing meaningful KPIs and performance metrics to monitor operational effectiveness, inform strategic decisions, and support continual service improvement.
If you’re passionate about making a difference, influencing strategic direction, and developing people and processes in a high-impact role, please read on!

KEY SKILLS & EXPERIENCES

• Proven leadership in cyber security operations, with experience managing a Security Operations Centre (SOC) or equivalent function, including oversight of both internal analysts and external partners.
• Track record of developing and implementing SOC processes, including playbooks, escalation protocols, and standard operating procedures to ensure efficient, consistent operations.
• Experience in designing and reporting on KPIs, SLAs, and performance metrics to monitor SOC performance, drive continual improvement, and provide visibility to senior leadership.
• Expertise in incident management, acting as a senior point of escalation and coordination during cyber incidents, ensuring effective response and stakeholder communication.
• Experience leading and developing high-performing teams, fostering a collaborative, inclusive culture aligned to organisational goals.
• Strong technical background in threat detection, SOC optimisation, and vulnerability management, with hands-on experience using industry-standard tools and platforms.
• Capability to manage outsourced SOC services, aligning partner activities with internal goals, setting performance expectations, and maintaining quality service delivery.
• Strategic thinking and planning ability, including the development of technical roadmaps, risk mitigation strategies, and resource alignment for both BAU and project work.
• Strong stakeholder engagement skills, with the ability to explain complex security issues to non-technical audiences and build trusted relationships across teams.
• Agile, collaborative leadership style, focused on mentoring team members, encouraging professional growth, and cultivating a culture of proactive security.

• Commitment to continuous improvement and industry engagement, staying current with evolving threats, technologies, and best practices.

  Highly Desirable Certifications

• Industry-recognised certifications such as CISSP, CISM, GIAC (e.g., GCIH, GCIA), or CompTIA Security+ / CySA+.

• Relevant technical certifications such as Cisco CCNP Security, Microsoft SC-200, or SANS Blue Team certifications.

• Framework-related qualifications (e.g. ISO 27001 Lead Implementer/Auditor, NIST CSF, or TOGAF) demonstrating capability in structured security operations and strategic alignment.

  To learn more about this exciting opportunity and benefits we offer, please read the JD and Candidate Pack provided below.

ABOUT THE ROLE

We’re looking for a Security Operations Centre (SOC) Manager to lead and evolve our Cyber Security Operations capability at Manchester Metropolitan University. This is a key leadership role at the forefront of our efforts to protect the University’s systems, data, and people from cyber threats.
As SOC Manager, you’ll be responsible for overseeing day-to-day security operations—managing a skilled team of analysts and specialists, ensuring the effective use of security tools and platforms, and driving continual improvements in detection, response, and threat management. You’ll play a crucial role in shaping operational strategy, maturing incident response processes, and embedding a measurable, proactive approach to cyber defence.
This is a highly collaborative role, requiring strong technical knowledge, excellent leadership skills, and the ability to communicate effectively across technical and non-technical audiences. You’ll work closely with colleagues across Information Security, IT and wider university services to enhance our security posture and support the delivery of a major security and risk transformation programme, including a major refresh of SOC tooling and capability.
It’s a unique opportunity to lead a growing team within a supportive and forward-thinking environment, where your work will make a measurable impact and help shape the future of cyber resilience in higher education.

KEY RESPONSIBILITIES

• Lead the day-to-day operations of the University’s Security Operations Centre (SOC), managing a team of analysts, engineers and external partners to ensure effective monitoring, detection, and response to cyber threats.
• Provide line management and leadership to the SOC team, including performance management, mentoring, and professional development, while fostering a collaborative and high-performing culture aligned with the University’s strategic objectives.
• Act as the primary incident manager during major security events, driving the cyber incident response process and ensuring swift, coordinated action.
• Develop and maintain key SOC processes, including standard operating procedures, escalation paths, and workflows.
• Define and report on KPIs, SLAs, and performance metrics to measure operational effectiveness and support strategic decision-making.
• Oversee threat management, SIEM optimisation, and vulnerability management activities, ensuring tools and workflows are continually tuned for impact.
• Serve as the main point of contact for outsourced SOC services and contribute to our wider sourcing strategy.
• Collaborate closely with the Deputy CISO and security leadership to shape strategic direction, enhance service integration, and foster a culture of continuous improvement.