[Hiring] Cyber Security Operations Lead @Genus PLC

Role Description

We are looking for an experienced Cyber Security Operations Lead to take ownership of the day‑to‑day protection of our global digital environment. You will provide pivotal leadership focused on threat detection, incident response, operational resilience, and continuous improvement. You’ll ensure cyber threats are identified early, incidents are managed effectively, and operational risk is reduced across Genus’s global estate.

Reporting to the Global Head of Cyber Security, you’ll work closely with IT Operations, Infrastructure teams, and the Technical Cyber Security Lead to ensure security controls, tooling, and processes operate reliably at scale. This role blends strong operational leadership with hands‑on oversight, making it ideal for someone who thrives in both strategic and high‑pressure environments.

You Will

• Security Monitoring & Detection
  • Own and oversee enterprise security monitoring capabilities, including SIEM, EDR/XDR, and alerting platforms.
  • Lead daily monitoring operations, including alert triage, investigation, and escalation.
  • Continuously improve detection use cases, alert logic, and tuning to reduce noise and improve signal quality.
  • Act as the primary operational contact for managed security service providers (MSSPs), vendors, and SOC partners.
• Incident Response & Management
  • Own the full cyber incident lifecycle: preparation, detection, containment, eradication, and recovery.
  • Act as senior incident manager for significant security incidents, coordinating technical teams, IT operations, and business stakeholders.
  • Maintain, test, and improve incident response plans, playbooks, and escalation procedures.
  • Lead post‑incident reviews and root cause analysis, ensuring lessons learned drive operational improvement.
  • Provide clear, timely updates to senior leadership during live incidents.
• Operational Security Controls
  • Ensure effective operation of core security controls including endpoint protection, identity monitoring, email security, and vulnerability remediation.
  • Partner with IT Operations to embed security into day‑to‑day processes such as patching, access management, and configuration changes.
  • Track and manage operational security risks, ensuring issues are logged, prioritised, and remediated.
  • Support resilience activities, including backup validation, recovery testing, and control health monitoring.
• Service Performance & Continuous Improvement
  • Define and track operational metrics such as response times, alert volumes, and control effectiveness.
  • Identify recurring issues and systemic weaknesses, driving improvements in tools, processes, and ways of working.
  • Support the transition of new security tools and capabilities from build into run.
  • Ensure operational readiness for new technologies, platforms, and business change.
• Collaboration, Risk & Assurance
  • Work closely with the GRC function to support audits, assurance activities, and evidence gathering.
  • Ensure incidents, control weaknesses, and operational findings are reflected in the cyber risk register and remediation plans.
  • Provide operational insight to inform cyber risk decisions, investment prioritisation, and strategy development.
• People & Team Leadership
  • Lead and develop Genus’s security operations capability, establishing clear roles, responsibilities, and expectations.
  • Mentor and support the global security team, strengthening monitoring, incident response, and resilience skills.
  • Support recruitment, onboarding, training, and professional development within the team.
  • Foster a culture of collaboration, accountability, and continuous improvement.

Qualifications

• Proven experience leading security operations, SOC, or incident response functions within a complex enterprise environment.
• Strong hands‑on knowledge of SIEM, EDR/XDR, and security monitoring platforms.
• Demonstrated experience managing cyber incidents across technical and business teams.
• Solid understanding of IT operations, infrastructure, cloud platforms, and identity services.
• Ability to translate technical incidents and operational risks into clear business impact.
• Experience working with third‑party security service providers or MSSPs.
• Relevant certifications (e.g. CISSP, CISM, GCIA, GCIH, SC‑200) are desirable.

Benefits

• Performance related bonus
• 25 days holidays + Bank Holidays
• Pension
• Health Cash back scheme
• Employee Assistance Program
• Employee share plan
• Flexible Working Policy (Where appropriate/practicable)
• Enhanced maternity leave 12 weeks at full pay followed by 4 weeks at 50% followed by SMP
• Comprehensive L&D program including career development programs, access to Genus University and Mango (languages)