At EY, we develop you with future-focused skills and equip you with world-class experiences. We empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams.
We work together across our full spectrum of services and skills powered by technology and AI, so that business, people and the planet can thrive together.
We’re all in, are you?
Join EY and shape your future with confidence.
About the Role
The Senior Manager/Manager, Security Operations is responsible for leading the delivery, transformation, and continual enhancement of Managed Cybersecurity Services while serving as a trusted cybersecurity advisor to clients. This role combines operational leadership, cybersecurity consulting, service innovation, and strategic planning to ensure clients receive high-quality, outcome-driven security services aligned with evolving cyber threats and business objectives.
The successful candidate will work closely with clients, internal engineering teams, security analysts, technology partners, and business stakeholders to design, deliver, and continuously improve modern Security Operations capabilities including Security Operations Centre (SOC), Managed Detection and Response (MDR), Threat Intelligence, Vulnerability & Exposure Management, Incident Response, Security Automation, AI-assisted Security Operations, and Cyber Resilience services.
Key Responsibilities
Managed Security Services Leadership
- Lead the delivery and governance of Managed Cybersecurity Services, ensuring service quality, operational excellence, and customer satisfaction.
- Manage day-to-day operations across SOC, MDR, SIEM, Threat Detection, Incident Response, Vulnerability & Exposure Management, Threat Intelligence, and Security Monitoring services.
- Establish and monitor KPIs, SLAs, OLAs, and service performance metrics to drive continual service improvement.
- Lead major security incident response and coordinate cross-functional teams during cyber incidents.
- Ensure operational processes align with industry best practices and security frameworks
Cybersecurity Consulting & Client Advisory
- Serve as a trusted cybersecurity advisor to enterprise clients.
- Understand client business objectives and translate them into cybersecurity strategies and managed security roadmaps.
- Conduct security posture assessments and maturity reviews.
- Advise clients on SOC transformation, security monitoring strategy, threat management, cyber resilience, detection engineering, and security operations optimization.
- Present executive-level recommendations, roadmaps, and business cases to CIOs, CISOs, and senior management.
Service Strategy & Innovation
- Own and continuously evolve the Managed Cybersecurity Services portfolio.
- Research emerging cyber threats, attack techniques, AI innovations, and cybersecurity technologies to ensure service offerings remain relevant and competitive.
- Develop and maintain service roadmaps aligned with industry trends and customer requirements.
- Introduce and enhance services including:
- AI-assisted Security Operations
- Security Orchestration, Automation & Response (SOAR)
- Managed Detection & Response (MDR)
- Extended Detection & Response (XDR)
- Threat Intelligence
- Vulnerability & Exposure Management
- External Attack Surface Management (EASM)
- Identity Threat Detection & Response (ITDR)
- Cloud Security Monitoring
- Digital Risk Protection
- Evaluate new technologies and define strategies for future service offerings.
Solution Development & Pre-Sales Support
- Collaborate with Solution Architects and Engineering teams to design scalable managed security solutions.
- Define service architectures, operational models, implementation approaches, and service delivery frameworks.
- Evaluate cybersecurity technologies and recommend strategic platform investments.
- Support business development through customer workshops, technical presentations, solution demonstrations, proposal development, and RFP/RFI responses.
- Provide technical leadership throughout the sales lifecycle.
Operational Excellence
- Develop and implement best practices for Security Operations and Managed Services delivery.
- Drive automation initiatives to improve operational efficiency and reduce manual effort.
- Establish governance frameworks, operational dashboards, executive reporting, and service health reviews.
- Continuously improve detection use cases, correlation rules, threat hunting methodologies, and incident response playbooks.
- Ensure continuous optimization of service performance and customer experience.
Stakeholder & Vendor Management
- Build strong relationships with clients, strategic technology partners, and internal stakeholders.
- Manage vendor relationships and evaluate emerging cybersecurity technologies.
- Collaborate closely with Consulting, Sales, Product Management, Engineering, Delivery, and Customer Success teams.
Team Leadership & Capability Development
- Lead, mentor, and develop a team of security consultants, SOC analysts, security engineers, service managers, and technical specialists.
- Foster a culture of innovation, collaboration, accountability, and continuous learning.
- Drive capability development in AI-enabled Security Operations, automation, detection engineering, and cloud security.
- Support recruitment, succession planning, performance management, and career development.
Required Qualifications
- Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Engineering, or a related discipline.
- 8–12 years of experience in cybersecurity, with at least 3 years in a leadership role managing Security Operations, Managed Security Services, or Cybersecurity Consulting.
- Strong understanding of enterprise security architecture, security operations, and managed service delivery.
- Proven experience managing enterprise cybersecurity programs and customer engagements.
Preferred Certifications
- CISSP
- CISM
- GIAC (GCIA, GCIH, GCFA or equivalent)
- CompTIA Security+
- Microsoft Certified: Cybersecurity Architect Expert or Security Operations Analyst
- AWS Certified Security – Specialty
- Google Professional Cloud Security Engineer
- ITIL Foundation or ITIL 4 Managing Professional
Technical Competencies
Experience with several of the following technologies and platforms:
- Security Operations Centre (SOC)
- SIEM Platforms: Microsoft Sentinel, Splunk, Google SecOps, CrowdStrike Falcon Next-Gen SIEM
- Endpoint Detection & Response (EDR) / Extended Detection & Response (XDR): CrowdStrike Falcon, Microsoft Defender XDR
- Security Orchestration, Automation & Response (SOAR)
- Managed Detection & Response (MDR)
- Threat Intelligence Platforms (TIP)
- Vulnerability & Exposure Management
- Cloud Security (AWS, Microsoft Azure, Google Cloud Platform)
- Identity Security & Identity Threat Detection and Response (ITDR)
- Security Automation & AI-assisted Security Operations
- Detection Engineering and Threat Hunting
- Digital Forensics and Incident Response
- Data Pipeline & Data Engineering for security telemetry ingestion, normalization, parsing, enrichment, ETL/ELT, and log management across cloud and on-premises environments
- API Integration and Security Platform Integration
- MITRE ATT&CK Framework
- NIST Cybersecurity Framework
- Zero Trust Architecture
Core Competencies
- Strategic thinking with strong business and commercial acumen.
- Strong cybersecurity consulting and advisory capabilities.
- Executive communication and presentation skills.
- Excellent stakeholder and client relationship management.
- Service portfolio management and innovation.
- Strong analytical and problem-solving abilities.
- Leadership, coaching, and people development.
- Customer-centric mindset with a focus on business outcomes.
- Ability to influence senior executives and drive organizational change.
Key Performance Indicators (KPIs)
Success in this role will be measured by:
- Client satisfaction, retention, and service quality.
- Achievement of SLA, KPI, and operational performance targets.
- Growth and adoption of Managed Cybersecurity Service offerings.
- Successful delivery of cybersecurity consulting and advisory engagements.
- Continuous improvement in automation, operational efficiency, and AI adoption.
- Development and retention of high-performing teams.
- Revenue growth through managed services, consulting engagements, and solution expansion.
- Innovation and modernization of Security Operations capabilities aligned with evolving cyber threats and market trends.
EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.
Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.
EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.
All in to shape the future with confidence.