Cyber Security Operations Manager

Provide security leadership and oversight for Kent's cybersecurity monitoring and response capabilities, including defining requirements, service expectations, escalation paths and measures of effectiveness.

Lead and coordinate the response to significant or complex security events and incidents, working with the teams responsible for the affected platforms and services.

Lead incident containment, eradication, recovery and post-incident review activities.

Develop and maintain incident response procedures, playbooks and escalation processes.

Coordinate internal and external stakeholders during security incidents.

Conduct root cause analysis and ensure remedial actions are implemented and tracked.

2. Security Monitoring & Threat Detection

Define and oversee improvements to security monitoring and detection capabilities, agreeing technical changes with the teams responsible for administering the relevant platforms.

Develop and tune detection rules, alerts and use cases to improve visibility of threats.

Conduct proactive threat hunting using available security telemetry and intelligence sources.

Track and assess emerging threats and vulnerabilities relevant to Kent's operating environment.

Benchmark detection and response capabilities against recognised frameworks including MITRE ATT&CK.

Lead the end-to-end vulnerability management process by setting the framework, risk-based priorities and reporting requirements, while Infrastructure, Cloud, Applications and other service owners remain accountable for assessment support, remediation and operational change within their environments.

Develop risk-based prioritisation processes for remediation activities.

Track remediation performance and provide reporting to stakeholders.

Coordinate vulnerability assessments, penetration testing and security reviews.

Verify remediation activities and security improvements.

Act as the security service owner for key cybersecurity capabilities, including CrowdStrike Falcon, by defining security requirements, control outcomes, roadmap priorities and service performance expectations. Day-to-day platform administration remains with the designated Infrastructure or Platform team.

Review the configuration and effectiveness of security tooling, identify required improvements and work with the relevant platform owners to plan, implement and validate changes

Provide technical guidance on security controls relating to endpoint security, identity management, email security, cloud security and data protection.

Assist in evaluating and implementing new security technologies and capabilities.

Provide security oversight for Microsoft 365, Azure and Entra ID environments by defining control requirements, reviewing risk and working with the responsible Platform and Infrastructure teams to prioritise improvements.

Monitor identity-related threats and security events.

Define Zero Trust security requirements and oversee their implementation by the teams responsible for identity, endpoint, network, cloud and application services.

Review security configurations and recommend improvements across cloud-based platforms.

Manage external attack surface monitoring activities.

Coordinate third-party penetration testing and red team exercises.

Review security findings and ensure appropriate remediation is planned and completed.

Identify opportunities to reduce external exposure and improve resilience.

Develop and report operational security metrics and key performance indicators.

Contribute to monthly security reporting and governance forums.

Support security audits, risk assessments and compliance activities.

Maintain operational security standards, procedures and documentation.

Drive continuous improvement initiatives to enhance the maturity of Kent's cybersecurity capability.

Work as a trusted partner to Infrastructure, Cloud, Network and Application teams to embed security-by-design principles into solutions from the outset.

Partner with Service Operations to ensure security incidents, vulnerabilities and remediation activities are properly operationalised through ITSM processes, clear ownership models and escalation paths.

Support Enterprise Architecture and project teams to identify and address security risks early in the solution lifecycle rather than after implementation.

Improve visibility of technology assets by aligning asset management, endpoint management and security monitoring.

Champion the use of automation to reduce manual security effort and improve response times.

Provide oversight and guidance on AI, Copilot and emerging technology risks as adoption grows across the business.

Work with Compliance, Internal Audit and business stakeholders to translate security activity into measurable risk reduction.

In addition to the responsibilities listed herein, the employee may be required to perform other ad-hoc tasks as needed or directed by the supervisor or management. These tasks will be within the reasonable scope of the employee's skills, capabilities, and role within the organization. The intent of this provision is to allow for flexibility and adaptability in meeting the dynamic needs of the organization, ensuring that operational requirements can be met efficiently. All such tasks will be assigned considering the employee's current workload and with respect to their professional development.

Experience with SIEM, SOAR, CASB, DLP, Email Security and Cloud Security platforms.

Knowledge of OT and industrial environments within the energy sector.

Scripting and automation experience using PowerShell, Python or similar technologies.

Experience creating operational dashboards and security reporting.

Experience working through ITSM/ITIL processes and partnering with service operations, infrastructure and architecture teams.

One or more of the following certifications would be advantageous:

CISSP

GIAC GCIH

CompTIA Security+

Microsoft Security Certifications (SC-200, SC-300, SC-100)

CrowdStrike CCFA or CCFR

OSCP or equivalent offensive security certification

Excellent command of the English language in both oral and written communication and skills.

Ability to communicate technical findings and incident summaries clearly to both technical and non-technical stakeholders.

Strong technical troubleshooting and investigative skills.

Ability to assess cyber risk and make pragmatic risk-based decisions.

Excellent stakeholder management and communication skills.

Ability to explain technical risks to non-technical audiences.

Self-motivated and able to operate independently while working collaboratively across teams.

Strong analytical and problem-solving capability.

Maintains composure and effectiveness during security incidents and high-pressure situations.

Demonstrates ownership, accountability and continuous improvement mindset.

Collaborative by nature, building trusted relationships across technology and business teams.

Focused on outcomes and measurable risk reduction rather than tooling alone.

The Employee shall observe the Health, Safety, Sustainability, Environment and Quality rules of the Company; it’s clients and the governing authorities of the host country.

Location: Mumbai (Hybrid, 2-3 Days a week in the Office)

Relocation required: No

Travel required: Sometimes

Contract type: Regular

Experience level: 10-15 Years

Foster a culture of equity, diversity and inclusion – a safe and respectful workplace. In addition to the responsibilities listed herein, the employee may be required to perform other ad-hoc tasks as needed or directed by the supervisor or management. These tasks will be within the reasonable scope of the employee's skills, capabilities, and role within the organization. The intent of this provision is to allow for flexibility and adaptability in meeting the dynamic needs of the organization, ensuring that operational requirements can be met efficiently. All such tasks will be assigned considering the employee's current workload and with respect to their professional development.

About you: Join us. Unleash your energy within. If you have world-class ambitions to reach the stars while keeping your feet on the ground, we’re the team for you. We've created a new breed of company – future-focused with reimagined ambition across all disciplines within the energy sector. We love people who know their own potential and are not afraid to use it. We know that together, we’re far more than the sum of our parts. So, we celebrate people who want to grow and develop as we work together on some of the largest projects on the energy world stage. We are committed to our diverse and inclusive community – a place where we can all be ourselves, thrive and develop. From day one, we offer a range of family-friendly, inclusive employment policies, flexible working arrangements, and employee networks to support staff from different backgrounds. As an Equal Opportunities Employer, we value applications from all backgrounds, cultures, and abilities. We’re a disability-friendly employer and can make adjustments to support you to perform at your best during the recruitment process. Our purpose and beliefs: As Kent, we’re tackling the greatest challenge of our time - to bring our world the energy it needs in the most responsible way ever imagined. It’s the energy of every member of our team driven by our beliefs that is making this happen. Whatever our skill, our language, or our culture. These beliefs define and direct us every day to be the very best - for ourselves, our clients, our key stakeholders, the communities we operate in and the planet: We PLAY BIG We thrive on EMOTIONAL AGILITY We are FANATICAL ABOUT PERFORMANCE We are built on INFINITE THINKING Read more about the Purpose, Beliefs and Guiding Principles that drive us : Our vision for Diversity, Inclusion and Belonging: We recognise that diversity & inclusion are catalysts for success. We’re heightening awareness on the benefits of people diversity, diversity of experiences and diversity of our perspectives. Creating a culture of inclusivity where all employees feel a sense of belonging. Our combined energy is fueled by different nationalities, across 6 continents and 24 countries. Our commitment is to celebrate character – no matter what ethnic background, gender, age, religion, identity, or disability.