Cyber Operations Lead

SysGroup is hiring a Cyber Operations Lead, based in Edinburgh, to head the day-to-day delivery of our cyber security managed services. This is the senior operational leadership role in the Cyber Security team under our 2026 operating model: you own the SOC service, lead the security engineers and analysts, and act as the escalation point for major security incidents across our client base.

This is a leadership and delivery role. You will run the operation, develop the people and own the service - including operational delivery of our Zscaler zero trust estate.

·       Lead, coach and develop the cyber operations engineers and analysts - 1:1s, development plans, hiring and succession.

·       Own capacity, shift and on-call planning for a 24/7 security service.

·       Set and track the team's certification and capability plan against the SysGroup role framework.

·       Own operational reporting: client-facing security reports, KPIs and continual service improvement.

·       Own SOC/SIEM service delivery: detection coverage, use-case tuning, triage quality and shift handovers.

·       Act as major incident lead for security events: containment, client communication and post-incident review.

·       Own the vulnerability management lifecycle across managed clients: scan, triage, remediate, report.

·       Set the standard for EDR and security tooling configuration, health and response playbooks.

·       Own operational delivery of the Zscaler zero trust estate (ZIA/ZPA): onboarding, policy lifecycle, tuning and upgrades.

·       Support Risk & Compliance engagements (ISO 27001, Cyber Essentials Plus) with operational evidence.

·       Embed AI-assisted workflows (triage, enrichment, reporting) into the SOC and measure the gains.

·       5+ years in security operations within an MSP/MSSP or equivalent multi-client environment.

·       3+ years leading engineers or analysts, including performance and development responsibility.

·       Track record running major security incidents end-to-end, including executive-level communication.

·       Operational experience with Zscaler (or equivalent SSE/zero trust platform) is a strong advantage.

·       Essential (or equivalent experience): Microsoft SC-200, plus an incident response credential such as GIAC GCIH.

·       Desirable: Zscaler professional-level certification (ZIA/ZPA), SC-300, AZ-500, ISO 27001 Lead Implementer, CISSP or CISM.

Joining Sysgroup means becoming part of a dynamic and innovative team that is dedicated to excellence. We offer a supportive, and collaborative work environment, where your ideas and contributions are valued. Here are some of the benefits of working with us:

We offer a competitive salary package, including performance-based incentives, to reward your hard work and achievements.

-          Private Healthcare

-          Life insurance

-          Healthcare cash plan

-          Pension

We believe in investing in our employees' professional development. You will  have your own individual development learning paths with access to various training material and ongoing career advancement opportunities.