We are seeking a dynamic and experienced Head of Security Operations to lead and mature our security operations function. This pivotal role will be responsible for defining and driving the overall security operations strategy and lifecycle, ensuring the protection of our critical assets and data. The ideal candidate will possess deep expertise in vulnerability management, threat intelligence, security operations centre (SOC) management, and incident response. This leader will build and mentor high-performing teams, optimise processes, and proactively mitigate security risks in ASOS’s evolving environment.

Day to day:

• Develop and implement a comprehensive security operations strategy aligned with the company's risk appetite and business objectives.
• Define and maintain the security operations roadmap, prioritising initiatives and resource allocation.
• Stay abreast of emerging threats, technologies, and industry best practices, and translate them into actionable strategies.
• Provide leadership and direction to the leads of the functional areas
• Leading the Cyber Defence function that includes Security Operations, IAM, Vulnerability Management and Internal/ External Threat Intelligence capabilities
• Working closely with vendors and third parties that assist the functions performed by the ASOS Sec Ops team.
• Be the main point of escalation for Cyber Defence issues within ASOS, overseeing and managing any Security Operational incidents and events.
• Developing threat intelligence strategy and continuous improvement plan to enhance and improve the Cyber Defence service
• Act as escalation for the SOC manager and oversee the overall efficiency of SOC and IR teams. Provide direction to align the teams towards proactive intelligence led response and oversee simulation and red team exercises

About You: 

• Significant experience in operational security, especially managing a Computer Incident Response Team (CIRT), Computer Emergency Response Team (CERT), Computer Security Incident Response Centre (CSIRC) or a Security Operations Centre (SOC) 
• Experience in industry standards and frameworks, such as ISO 27001, PCI DSS and NIST CSF 
• Relevant experience of working an operational security capacity 
• Experience in security device management and SIEM 
• Proven experience of Incident Management and Response 
• In depth knowledge of security concepts such as TTPs, threat vectors, risk management, incident management etc. 
• Experience in threat management 
• Proficient in preparation of reports, dashboards, presentations and documentation 
• Experience in getting the best from vendors 

BeneFITS’ 

• Employee discount (hello ASOS discount!) 
• ASOS Develops (personal development opportunities across the business) 
• Employee sample sales  
• Access to a huge range of LinkedIn learning materials 
• 25 days paid annual leave + an extra celebration day for a special moment 
• Discretionary bonus scheme  
• Private medical care scheme 
• Flexible benefits allowance - which you can choose to take as extra cash, or use towards other benefits 

Why take our word for it? Search #InsideASOS on our socials to see what life at ASOS is like. 

Want to find out how we’re tech powered? Check out the ASOS Tech Podcast here https://open.spotify.com/show/6rT4V6N9C7pAXcX60kzzxo . Prefer reading? Check out our ASOS Tech Blog here https://medium.com/asos-techblog.