SysGroup plc
Cyber Operations Lead
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
The Role
SysGroup is hiring a Cyber Operations Lead, based in Edinburgh, to head the day-to-day delivery of our cyber security managed services. This is the senior operational leadership role in the Cyber Security team under our 2026 operating model: you own the SOC service, lead the security engineers and analysts, and act as the escalation point for major security incidents across our client base.
This is a leadership and delivery role. You will run the operation, develop the people and own the service - including operational delivery of our Zscaler zero trust estate.
Requirements
Key Responsibilities
Leadership
- Lead, coach and develop the cyber operations engineers and analysts - 1:1s, development plans, hiring and succession.
- Own capacity, shift and on-call planning for a 24/7 security service.
- Set and track the team's certification and capability plan against the SysGroup role framework.
- Own operational reporting: client-facing security reports, KPIs and continual service improvement.
Security operations
- Own SOC/SIEM service delivery: detection coverage, use-case tuning, triage quality and shift handovers.
- Act as major incident lead for security events: containment, client communication and post-incident review.
- Own the vulnerability management lifecycle across managed clients: scan, triage, remediate, report.
- Set the standard for EDR and security tooling configuration, health and response playbooks.
- Own operational delivery of the Zscaler zero trust estate (ZIA/ZPA): onboarding, policy lifecycle, tuning and upgrades.
- Support Risk & Compliance engagements (ISO 27001, Cyber Essentials Plus) with operational evidence.
- Embed AI-assisted workflows (triage, enrichment, reporting) into the SOC and measure the gains.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Experience
- 5+ years in security operations within an MSP/MSSP or equivalent multi-client environment.
- 3+ years leading engineers or analysts, including performance and development responsibility.
- Track record running major security incidents end-to-end, including executive-level communication.
- Operational experience with Zscaler (or equivalent SSE/zero trust platform) is a strong advantage.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Certifications
- Essential (or equivalent experience): Microsoft SC-200, plus an incident response credential such as GIAC GCIH.
- Desirable: Zscaler professional-level certification (ZIA/ZPA), SC-300, AZ-500, ISO 27001 Lead Implementer, CISSP or CISM.
Benefits
Why Join Us?
Joining Sysgroup means becoming part of a dynamic and innovative team that is dedicated to excellence. We offer a supportive, and collaborative work environment, where your ideas and contributions are valued. Here are some of the benefits of working with us:
Competitive Compensation
We offer a competitive salary package, including performance-based incentives, to reward your hard work and achievements.
- Private Healthcare
- Life insurance
- Healthcare cash plan
- Pension
Growth Opportunities
We believe in investing in our employees' professional development. You will have your own individual development learning paths with access to various training material and ongoing career advancement opportunities.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills