Manager – Security Operation Center Division

About the Job

The Bank is seeking a skilled and experienced SOC Manager responsible for establishing, implementing, and continuously enhancing the Security Operations Center (SOC) operating model. This role ensures scalable, resilient, and effective 24/7 security monitoring, threat detection, incident response, and digital forensics to protect the Bank’s IT environment and digital assets.

Job Description

• Establish, implement, and enhance the SOC operating model to ensure scalable and effective security monitoring and incident response capabilities
• Lead and oversee all SOC functions, including security monitoring, alert triage, threat detection, incident response, digital forensics, and recovery activities
• Define and implement SOC strategy, roadmap, and maturity improvement plans aligned with the Bank’s overall IT security strategy
• Manage and optimize security technologies, including SIEM, EDR/XDR, WAF, SOAR, and threat intelligence platforms, ensuring integration, automation, and visibility
• Develop and improve detection use cases, correlation rules, and playbooks to enhance accuracy and reduce false positives
• Lead proactive threat hunting and adversary detection activities using threat intelligence and advanced analytics
• Oversee end-to-end incident response, ensuring timely detection, containment, eradication, recovery, and post-incident review with documentation
• Integrate and operationalize threat intelligence relevant to the Bank’s risk profile and emerging cyber threats
• Ensure comprehensive logging, monitoring, and visibility across infrastructure, applications, and digital banking platforms
• Conduct root cause analysis and implement corrective/preventive actions to strengthen security posture
• Ensure SOC readiness for major cyber incidents, including leading cyber drills, simulations, and exercises
• Collaborate with Infrastructure Security, Application Security, and Identity Management teams to ensure timely remediation of incidents
• Ensure compliance with regulatory directives, internal policies, and standards such as ISO 27001, NIST, PCI DSS, and National Bank of Ethiopia requirements
• Define and monitor SOC KPIs and performance metrics, including detection time, response time, incident trends, and operational efficiency
• Prepare and present regular reports on threat landscape, SOC performance, incidents, and risks to management

Job Requirements

• First Degree in Computer Science, Information Technology, Computer Engineering, MIS, or related field
• Minimum of 9 years of relevant experience, including at least 3 years at a supervisory level

Skills Required:

• Computer / Software / It / Data