Security Operations Manager job at Pearl Bank Uganda Ltd | Apply Now

1. Security Operations Oversight

• Lead and supervise daily activities within the Security Operations Center.

• Ensure efficient monitoring, analysis, and escalation of security events.

2. Incident Response Management

• Define and manage incident escalation protocols, incident response (IR) playbooks, and workflows.

• Conduct root cause analyses and post-incident reviews, providing actionable recommendations.

3. Threat Intelligence & Threat Hunting

• Integrate and operationalize threat intelligence feeds within SOC operations.

• Oversee proactive threat hunting and anomaly detection activities.

4. Technology & Tooling

• Manage and optimize SOC technologies, including SIEM, SOAR, EDR/XDR, IDS/IPS, threat intelligence, and log management platforms.

• Lead tuning, integration, and automation of detection and response workflows.

• Evaluate and recommend new tools to enhance detection and response capabilities.

5. Process & Policy Development

• Develop and maintain SOC standard operating procedures (SOPs) and incident response documentation.

• Ensure SOC operations comply with ISO/IEC 27001:2022, NIST CSF, SWIFT CSP, BoU Guidelines, and PCI DSS v4.

• Continuously refine processes to reduce false positives and improve response times (MTTD/MTTR).

6. Collaboration & Stakeholder Engagement

• Coordinate with IT, Infrastructure, Risk, Legal, and Compliance teams during incident management.

• Collaborate with third-party MSSPs, incident response vendors, and national CERT teams as required.

• Provide documentation and evidence during internal audits and regulatory inspections.

7. Strategic Planning & Reporting

• Develop and implement a roadmap for SOC capability maturity.

• Track and report SOC performance metrics such as MTTD, MTTR, incident volume, and SLA compliance.

• Present monthly and quarterly performance reports to the CISO and executive leadership.