About the Role

We are partnering with a global financial services organization as they continue to mature and modernise their cyber security operations capability. This newly shaped SOC Lead role will play a critical part in strengthening how the organization detects, responds to and recovers from cyber threats across its global setting.

This is a hands‑on leadership role sitting close to the tools, the people and the incidents. You’ll lead the hybrid 24/7 SOC activity, influence operational strategy and act as the bridge between internal teams and external security partners.

What's a typical day look like?

- Lead the day-to-day operations of a hybrid 24/7 SOC
- Oversee threat detection, incident response and threat hunting across global regions
- Collaborate with external MSSP partners, aligning on SLAs, KPIs and threat intelligence sharing
- Design and implement SOC processes, playbooks and metrics to measure operational maturity
- Lead incident response lifecycle - detection, containment, eradication and recovery
- Drive continuous improvement initiatives, leveraging automation and AI
- Ensure alignment with frameworks including NIST, SOC 2 and MITRE ATT&CK;
- Provide leadership and mentorship to SOC analysts and engineers
- Challenge existing processes, identify gaps and drive operational enhancements

About you





- 5+ years' experience in Cyber Security Operations or SOC management roles within Financial Services
- Strong understanding of threat modelling, incident response and adversary tactics (TTPs)
- Proficiency with SIEM, SOAR and threat intelligence platforms
- Experience managing hybrid SOC environments and external MSSP partnerships
- Hands‑on understanding of network, endpoint, identity and cloud security (especially Azure/M365)
- Familiarity with automation/scripting (Python, PowerShell) and use of AI tools to optimise SOC workflows
- Knowledge of key frameworks - MITRE ATT&CK;, NIST, SOC 2
- Experience integrating Active Directory, SSO (Single-Sign On)
- Proven leadership and communication skills, with the ability to engage across technical and executive levels.
- Experience working within a global environment
- Relevant certifications such as CISSP, CISM, GCIA, GCIH, CSA (highly regarded)
- Must be an Australian Citizen or Permanent Resident

Apply now

or reach out to Shannon Stobbs at to find out more!

Kapital Consulting is a niche Fintech Recruitment Business specialising in Technology, Project Services and Data Recruitment across Australia. For more information connect with us on and follow us on

#J-18808-Ljbffr

📌 Cyber Security Operations Lead (City of Sydney)
🏢 Kapital Consulting
📍 City of Sydney