Monroe Consulting Group Indonesia, an executive recruitment firm, is looking to fill the position of IT SOC & Managed Risk Manager for a prominent system integrator in Indonesia. The ideal candidates should possess extensive experience to lead the Security Operations Center and Managed Risk services in a managed security (MSSP) environment, ensuring 24/7 monitoring and incident response, while also overseeing vulnerability, risk, and compliance management for multiple enterprise clients.
Key Responsibilities:
- Lead daily SOC operations across multiple clients.
- Manage SOC teams (analysts, threat hunters, incident responders) to meet SLAs and service quality.
- Oversee incident handling, escalation, and post-incident reviews.
- Improve detection rules, playbooks, and security automation.
- Oversee vulnerability scanning, assessment, and remediation tracking.
- Deliver managed risk services such as risk scoring, reporting, patch advisory, and attack surface monitoring.
- Ensure risk deliverables meet client expectations and contractual SLAs.
- Combine incident data with vulnerability insights to give clients a clear risk picture.
- Serve as the main point of contact for SOC and risk services.
- Provide regular reports on security incidents, vulnerabilities, and risk posture.
- Lead client review meetings and quarterly business reviews (QBRs).
- Support sales and pre-sales activities to grow service offerings.
- Integrate threat intelligence into detection and risk workflows.
- Prioritize response by linking active threats to vulnerable assets.
- Track emerging threats, CVEs, and cybersecurity trends.
- Maintain SOC and risk documentation (SOPs, SLAs, runbooks).
- Ensure alignment with standards such as ISO, NIST, and CIS.
- Support internal and client audits.
- Drive continuous service and process improvements.
- Train and mentor SOC analysts and risk consultants.
- Manage certifications and skill development plans.
- Build a collaborative, proactive security culture.
Requirements
- Bachelor's or Master's degree in IT, Computer Science, or Information Security (preferred).
- 5-10 years of cybersecurity experience, including:
- 3+ years in SOC leadership
- 2+ years in risk or vulnerability management
- Experience managing multi-tenant environments (MSSP or large enterprise).
- Strong knowledge of SIEM, SOAR, EDR, vulnerability tools, and risk frameworks.
- Strong leadership, communication, and stakeholder management skills.
- Able to manage multiple clients and priorities effectively.
Preferred Certifications
- Security+: CEH, GCIH
- CISSP, CISM, or CRISC
- GIAC certifications (GCIA, GCFA, GRID)
