About the role

The Cyber Security Operations Practice Lead is a leader accountable for end-to-end SOC operational delivery, service quality, resilience and commercial sustainability across the agreed regional scope.

The role leads through SOC team leaders and designated technical and enablement leaders. It sets direction, delegates authority and assures delivery of monitoring, triage, investigation, escalation and customer communication against agreed obligations.

The Practice Lead retains accountability for SOC outcomes, with team leaders responsible for daily execution. The role provides senior customer assurance, resolves cross-team dependencies and governs SOC operational acceptance, working collaboratively with and receiving specialist support from Detection Engineering, Threat Hunting, Threat Intelligence, DFIR, Engineering, DevOps - (ACIRT), Solution Specialists and Service Delivery Management. These functions retain ownership of their respective capabilities and deliverables and do not fall under the Practice Lead’s operational ownership.

The role translates the Head of MSO's strategy into an executable SOC operating plan, develops leadership depth and escalates material risks and decisions beyond delegated authority. It is not a routine shift supervisor or default technical responder.

Key Responsibilities

- Lead Managed Security Operations: Own the operational performance, resilience and continuous improvement of the SOC, establishing clear standards, governance, priorities and escalation pathways.
- Build and lead high-performing teams: Lead SOC operational, technical and enablement leaders, ensuring the right capability, capacity,



succession planning and leadership coverage across the practice.
- Deliver strong customer security outcomes: Act as a senior trusted advisor and escalation point for key customers, translating security risks, incidents, detection coverage and improvement priorities into explicit business outcomes.
- Drive service quality and assurance: Oversee SOC performance, reporting and service commitments, ensuring risks, gaps and corrective actions are identified, owned and effectively resolved.
- Lead service onboarding and transition: Set operational readiness standards for new and changing services, ensuring telemetry, detections, access, workflows, documentation and analyst capability are ready for successful BAU delivery.
- Strengthen detection and response capabilities: Partner with incident response, detection engineering and security engineering teams to improve threat detection, hunting, automation, telemetry and investigation effectiveness.
- Lead major incident and service escalations: Mobilise SOC leadership during significant security incidents, ensuring clear ownership, effective customer and executive communication, and robust post-incident improvement.
- Drive commercial and operational performance: Provide operational input into proposals, renewals and service changes while actively managing capacity, scope,



cost-to-serve and delivery commitments.
- Champion transformation and automation: Maintain a prioritised improvement roadmap and drive initiatives that enhance SOC efficiency, scalability, service quality and customer value.

Experience

- Demonstrated accountability for a multi-customer SOC or managed security operations function, beyond senior analyst or shift-lead responsibilities.
- Demonstrated experience leading managers or team leaders, with accountability for distributed, shift-based operational services.
- Strong customer engagement and executive communication capability.
- Practical understanding of monitoring, investigation, escalation, detection engineering and incident response.
- Experience establishing leadership governance, decision rights, service assurance and evidence-based operational acceptance.
- Commercial judgement across delivery effort, scope control and service sustainability.
- Experience implementing operational change without compromising service continuity.
- Ability to translate applicable security and assurance requirements into operational controls and evidence.

Qualifications

- Relevant cybersecurity, technology or management qualifications, or equivalent substantial professional experience.

Desired Experience & Knowledge / Other Relevant Information

- CISSP, CISM or comparable credentials are desirable. Relevant operational and vendor certifications should support the platforms and services within the approved portfolio.

Why Fujitsu?

We are an organization with a strong set of values and a history of respecting fairness and eq

📌 Managed Sec Ops Practice Lead (Australia)
🏢 Fujitsu
📍 Australia