Service Security Manager

We are looking for the very Top Talent...and we would be delighted if you were to join our team!

More in details, UST is a multinational company based in North America, certified as a Top Employer company with over 35.000 employees all over the world and presence in more than 30 countries. We are leaders on digital technology services, and we provide large-scale technologic solutions to big companies.

• Single point of contact (SPOC) and security advisor for a portfolio of up to 12 enterprise clients, or one dedicated key account
• Owns service governance for a managed SOC service: SLAs, reporting, critical incidents, changes, risks and improvement
• Service management role, not a SOC analyst role: no triage, threat hunting or SIEM administration

• Major incidents: coordinate communication across client, SOC and vendors; deliver post-incident reports (root cause, impact, actions)
• Service governance: run monthly operational and executive service reviews; issue minutes with actions, owners and dates
• SLA/KPI management: track SLAs, flag deviations proactively, produce monthly service reports and dashboards
• Service requests: qualify, prioritise and close; route out-of-scope needs as new business opportunities
• Change management: assess impact on security posture, communicate windows and risks, verify results
• Risk and action tracking: maintain action log and operational risk register
• Continual improvement: review client security posture, propose improvements and build the service roadmap
• Stakeholder management: build trusted relationships with CISOs and IT leadership; regular client visits
• Backup: act as backup SSM for peer portfolios

• Monday to Friday, business hours.
• Occasional out-of-hours support for critical incidents

• Remote, Spain.
• Candidates based in Madrid preferred (occasional client visits and in-person reviews)

• 4+ years in managed security services (MSSP/SOC) in a client-facing role: Service Delivery Manager, TAM, Security Service Manager or similar
• Proven experience in incident, major incident, change, risk and service level management
• Solid security knowledge: SOC operating models, detection and response, SIEM/SOAR, vulnerability management, network and endpoint security
• Executive communication: leading steering committees and writing executive reports
• Able to diagnose issues in real time and discuss them technically with client CISOs

• Google SecOps certification within 3 months (company-funded)

• ITIL 4 (incident, problem, change, service level, continual improvement)
• MITRE ATT&CK
• ISO/IEC 27001