Head of Security Operations & Delivery (IT)

Role Overview

You'll be the technical backbone of our delivery practice — replacing and elevating the senior technical leadership the team is losing, while building a modern, AI-augmented VAPT and SOC operation instead of running the same manual playbook the team has used for years. You'll own delivery quality across every client engagement and mentor a small team of consultants into specialists.

KeyResponsibilities

• Own end-to-end delivery quality for VAPT, SOC/managed detection, and risk assessment engagements — from scoping through final report sign-off.
• Redesign delivery workflows to incorporate AI-assisted reconnaissance, scanning, and alert triage, working closely with the AI Security & Automation Lead — freeing the team to focus on exploitation logic, business-context risk rating, and client communication.
• Launch and run our continuous/subscription-based VAPT offering, distinct from traditional point-in-time engagements.
• Mentor and technically develop 2 junior consultants, giving each a clear specialization track (VAPT/red-team or SOC/GRC).
• Act as the senior technical escalation point for clients and act as a technical sign-off authority on all findings before they leave the building.
• Partner with the Director, BD & Client Success on scoping calls and technical credibility during sales conversations.
• Own technical hiring decisions for future delivery-team growth.

Required Qualifications

• 6–10 years in penetration testing, red teaming, or security operations, with at least 2 years in a technical lead or team-lead capacity.
• Recognized offensive security certification (OSCP, OSCE, or equivalent) or strong demonstrable equivalent experience.
• Hands-on experience across web/network/cloud penetration testing and SOC/SIEM operations.
• Demonstrated (not just theoretical) use of AI/automation tooling in a security engagement — this is a genuine screening bar, not a nice-to-have.
• Strong written and verbal communication — able to translate technical findings into business risk for non-technical stakeholders.

Preferred

• Experience running or scaling a security consulting/delivery team of 3+ people.
• Familiarity with ISO 27001, NIST CSF, or similar frameworks.
• Exposure to continuous/DevSecOps-aligned testing models.