Information Security Operations (SecOps) Lead

• Lead daily operation of core security tools (endpoint protection, email security, network monitoring, SIEM/SOC integrations)

• Manage outsourced SOC/MSSP providers for effective alert triage, escalation and 24/7 coverage

• Review critical alerts and prioritise response; coordinate with platform squads and IT ops on vulnerabilities

• Ensure logging, monitoring and detection coverage across applications, infrastructure, cloud and retail environments

• Oversee end-to-end cyber incident handling (analysis, containment, recovery) with CISO, Infrastructure and Technology Resilience

• Maintain incident runbooks and readiness for events affecting stores, IT platforms, digital engagement and data systems

• Conduct post-incident reviews and drive follow-up actions to reduce recurrence

• Implement and enforce secure configuration baselines for infrastructure, networks, endpoints and cloud workloads

• Support security guardrails and secure-by-design patterns within development and integration squads

• Partner with Enterprise Architecture to validate technical designs against CISO standards; coach security champions

• Degree in Information Security, IT, Risk Management or related field, or 7+ years’ experience in a similar role

• 5+ years’ experience in IT security or vendor risk management, preferably in a multi-vendor environment

• Exposure to outsourced service models, SOC/MDR providers and cloud-hosted solutions

• Practical experience with endpoint, email, network and SIEM/SOC tooling

• Ability to lead incident response and vendor-managed security operations

• Strong stakeholder management across CISO, Infrastructure, Technology Resilience and platform squads