SOC Lead - Cyber Security Operations - VOIS

Who we are VOIS (Vodafone Intelligent Solutions) is a strategic arm of Vodafone Group Plc, creating value for customers by delivering intelligent solutions through Talent, Technology & Transformation. As the largest shared services organisation in the global telco industry with 30,000 FTE, our portfolio of next-generation solutions and services are designed in partnership with customers across Vodafone Group, local markets, and partner markets to simplify and drive growth. With our strategic partner Accenture, we work alongside our Vodafone customers, other Telco and tech companies to drive transformation, meet the challenges of our industry and ensure we stay relevant and resilient. This partnership is a unique, industry-first model which brings together the best of in-house and 3rd party capability. We work with customers across 28 countries from 10 VOIS locations: Albania, Egypt, Hungary, India, Romania, Spain, Turkey, UK, Germany, Ireland, and with a network of teams in Czech Republic, Italy, Greece, and Portugal. #VOIS #BeUnrivalled #CreateTheFuture About this Role We are seeking an experienced SOC Lead to head Vodafone’s Security Operations Centre (SOC) as part of Cyber Defence Operations (CDO). This role is accountable for the end-to-end delivery of SOC monitoring and response services across markets, ensuring consistent, high-quality detection and incident response in a 24x7 environment. The role combines operational leadership, deep technical expertise, and a strong transformation mindset, with a particular focus on embedding automation and AI-driven capabilities into live SOC operations. Acting as a bridge between operational excellence and SOC modernisation, the individual will ensure that new capabilities are effectively adopted, governed, and optimised to strengthen Vodafone’s global cyber defence posture. What you’ll do Lead and manage 24x7 SOC operations, ensuring consistent, high-quality alert monitoring, triage, and incident response across all markets.Own and drive SOC service performance against key KPIs including MTTT, MTTR, triage quality, and SLA adherence, delivering measurable improvements in detection quality, response speed, and efficiency.Oversee the full alert lifecycle, ensuring accurate investigation, containment, escalation, and high-quality incident reporting.Continuously enhance detection capabilities by improving SIEM use cases, alert logic, and playbooks, reducing false positives and increasing coverage across priority threat the adoption of automation, SOAR, and AI-assisted capabilities to improve speed, consistency, and scalability, with appropriate governance and human oversight.Lead SOC transformation initiatives focused on reducing alert fatigue, streamlining workflows, and improving analyst , coach, and develop a high-performing SOC team through structured capability development, performance management, and knowledge sharing.Act as the final escalation point for complex or high-risk incidents, applying expert judgement to validate and close cases.Deliver clear, data-driven SOC performance and incident reporting to senior leadership.Foster a culture of continuous improvement through post-incident reviews, detection retrospectives, and operational learning. Who you are An experienced cybersecurity professional with 8+ years in security operations, including at least 4+ years in a SOC leadership or senior incident response role.A proven leader of 24x7 SOC teams, with a strong track record of improving MTTT/MTTR, triage quality, and operational performance.A technical authority in incident response, capable of leading complex investigations and making sound decisions under pressure.Highly experienced with SIEM platforms such as Splunk, Microsoft Sentinel, Google SecOps, ArcSight, or QRadar, and familiar with EDR/NDR technologies.Skilled in driving SOC automation, SOAR, and AI-enabled capabilities, with a clear understanding of governance and responsible use.Knowledgeable across network, endpoint, and cloud security, with a strong grasp of attacker techniques and the MITRE ATT&CK framework.An analytical decision-maker who balances risk, speed, and business impact in ambiguous situations.Passionate about developing people and building sustainable SOC capability for the future.Educated to degree level in Cyber Security, Computer Science, Information Technology, or a related discipline (or equivalent practical experience).Holder of relevant certifications such as GIAC, CISSP, or vendor-specific SOC certifications; interest or exposure to AI/ML in security is an advantage.Committed to continuous learning, innovation, and contribution to the wider security community. Not a perfect fit? Concerned you may not meet every requirement? Vodafone is committed to creating an inclusive workplace where everyone can thrive. If you are excited about this role but your experience does not align exactly with every aspect of the job description, you are encouraged to apply. You may be the right candidate for this or another opportunity, and the recruitment team will support you in exploring where your skills fit best. What's in it for you The opportunity to lead a globally impactful SOC function within a recognised Cyber Defence Centre of Excellence.Exposure to large-scale, complex cyber defence operations across multiple international markets.The chance to shape and influence the future of SOC operations through automation and AI-driven transformation.A collaborative, inclusive environment that supports professional growth and continuous learning.The ability to work with advanced security technologies and experienced cyber defence professionals. What skills you will learn Advanced SOC leadership in a highly automated, AI-enabled operational environment.Strategic integration of SOAR and AI capabilities into live security operations.Enhanced stakeholder communication and executive-level cyber risk reporting.Scalable SOC governance and performance management across global operations.Deepened expertise in emerging threat landscapes and modern detection engineering. VOIS Equal Opportunity Employer Commitment Vodafone recognises and celebrates the value of diversity in building a workforce that reflects the customers and communities it serves. No form of discrimination is tolerated. This includes, but is not limited to, discrimination based on race, colour, age, veteran status, gender identity, gender expression, sexual orientation, pregnancy, maternity or parental status, ethnicity, disability, religion or belief, political affiliation, trade union membership, nationality, citizenship, indigenous status, medical condition, HIV status, neurodiversity, social origin, cultural background, marital or civil partnership status, or socio-economic background. Join Us At Vodafone, we’re working hard to build a better future. A more connected, inclusive and sustainable world. As a dynamic global community, it's our human spirit, together with technology, that empowers us to achieve this. We challenge and innovate in order to connect people, businesses, and communities across the world. Delighting our customers and earning their loyalty drive us, and we experiment, learn fast and get it done, together. With us, you can truly be yourself and belong, share inspiration, embrace new opportunities, thrive, and make a real difference. Alert Apply for Vodafone jobs only through the official Vodafone Careers website to avoid job scams and fraud. #JDEnhancedByTARA Follow us on social media LinkedIn: Facebook: Instagram: Chat with our employees: