SOC Manager - Digital Bank

About the role

Envision Employment Solutions is recruiting a SOC Manager for a leading digital bank partner. You will lead the defence of the bank from its first day, running a Security Operations Centre that detects attacks, contains them and restores safety. During major incidents you and your team will lead the response, coordinate decisions and protect customers and the bank.

Key responsibilities

• Lead the cybersecurity incident response lifecycle end to end, from identification and containment through eradication, recovery and post-incident review, feeding lessons back into the organisation
• Oversee 24x7 security monitoring and incident handling against defined procedures, escalation paths and service levels
• Build and continuously improve incident response frameworks, playbooks and readiness exercises, including tabletop simulations
• Drive threat intelligence, threat hunting and security investigations to identify emerging risks before they become incidents
• Act as the primary escalation point during major cyber incidents, coordinating technical teams, senior management, communications and regulators
• Improve detection quality by reducing false positives, closing visibility gaps and measuring control effectiveness
• Ensure SIEM, SOAR, EDR and threat intelligence platforms are integrated, automated and tuned
• Work with Security Engineering, infrastructure and application teams to embed detection and response requirements into new systems
• Develop the SOC team through coaching, practical exercises and clear analyst progression

Required profile

• 7 to 10 years in cybersecurity, with 4 to 5 years clearly running a Security Operations Centre
• Command of the full incident response lifecycle, grounded in a recognised framework such as NIST or SANS
• Record of building detection capability, playbooks, operating procedures and readiness exercises
• Strong judgement under pressure and clear communication during major incidents
• Certifications such as CISSP, CISM, GCIH or GCFA, and financial services cybersecurity experience, are valuable but not essential
• Familiarity with the Egyptian Cybersecurity framework is valuable but not essential

The workplace is on site. Apply through Envision Employment Solutions.