Security Operations Center Manager

About the role

IFS is hiring a Security Operations Center (SOC) Manager in Colombo, a strategic leadership role within the Product & Customer Organization (PCO). The SOC operates 24x7 and reports to the Director of Cloud Services and Security. The manager leads a team of security engineers and analysts, handles major security incidents, ensures regulatory compliance and drives continuous security improvements.

Key responsibilities

• Lead and manage the day-to-day operations of the Cloud Security Operations Center (CSOC)
• Drive continuous improvement of the security posture through collaboration with engineering, platform and product teams
• Oversee vulnerability management and ensure timely remediation of security risks
• Support internal and external security audits, compliance assessments, customer security reviews and evidence collection
• Maintain SOC processes, runbooks, knowledge base articles and operational documentation
• Plan and run tabletop exercises, incident simulations and readiness activities
• Define, monitor and report SOC KPIs, SLAs and operational metrics
• Lead the SOC's workforce transformation for AI adoption, redesign analyst roles, upskill them and act as executive liaison for AI-related security incidents
• Evaluate security technologies and automation opportunities, and lead, mentor and develop security engineers and analysts

Required profile

• Degree in Information Security, Computer Science or Information Technology
• 5+ years of SOC, incident response or cyber security operations experience, including 2+ years in a team leadership or management role
• Desirable: experience managing global or distributed SOC teams and supporting enterprise compliance and security audits
• Desirable: one of CISSP, CISM, CEH, CCSK, Security+ or similar, plus cloud provider experience (AWS, Azure, GCP)

Required skills

• Solid understanding of cloud security technologies and security architecture
• Strong understanding of SOC functions and best practices
• Leadership, stakeholder communication and executive reporting
• ITSM knowledge is an added advantage
• Knowledge of automation, orchestration and AI-driven security operations is an added advantage

The company offers flexibility and hybrid work opportunities.