Head of Security Operations & Delivery (IT)

Role Overview You'll be the technical backbone of our delivery practice — replacing and elevating the senior technical leadership the team is losing, while building a modern, AI-augmented VAPT and SOC operation instead of running the same manual playbook the team has used for years. You'll own delivery quality across every client engagement and mentor a small team of consultants into specialists. KeyResponsibilities • Own end-to-end delivery quality for VAPT, SOC/managed detection, and risk assessment engagements — from scoping through final report sign-off. • Redesign delivery workflows to incorporate AI-assisted reconnaissance, scanning, and alert triage, working closely with the AI Security & Automation Lead — freeing the team to focus on exploitation logic, business-context risk rating, and client communication. • Launch and run our continuous/subscription-based VAPT offering, distinct from traditional point-in-time engagements. • Mentor and technically develop 2 junior consultants, giving each a clear specialization track (VAPT/red-team or SOC/GRC). • Act as the senior technical escalation point for clients and act as a technical sign-off authority on all findings before they leave the building. • Partner with the Director, BD & Client Success on scoping calls and technical credibility during sales conversations. • Own technical hiring decisions for future delivery-team growth. Required Qualifications • 6–10 years in penetration testing, red teaming, or security operations, with at least 2 years in a technical lead or team-lead capacity. • Recognized offensive security certification (OSCP, OSCE, or equivalent) or strong demonstrable equivalent experience. • Hands-on experience across web/network/cloud penetration testing and SOC/SIEM operations. • Demonstrated (not just theoretical) use of AI/automation tooling in a security engagement — this is a genuine screening bar, not a nice-to-have. • Strong written and verbal communication — able to translate technical findings into business risk for non-technical stakeholders. Preferred • Experience running or scaling a security consulting/delivery team of 3+ people. • Familiarity with ISO 27001, NIST CSF, or similar frameworks. • Exposure to continuous/DevSecOps-aligned testing models.