Cybersecurity Operations Coordinator

About the role

The Cybersecurity Operations Coordinator ensures the smooth functioning of the Security Operations Center (SOC) and drives the organization’s incident response, vulnerability, and compliance activities. Acting as the central communication hub, the coordinator works closely with analysts, engineers, IT teams and senior leadership to protect digital assets and maintain regulatory standards.

Key responsibilities

• Coordinate daily SOC activities, including shift handovers, task prioritisation and workload distribution.
• Oversee the full incident lifecycle—from detection and containment to eradication and recovery—ensuring timely escalation.
• Maintain and update incident response playbooks, runbooks and standard operating procedures.
• Serve as the primary liaison between the SOC, IT departments and business units during active security events.
• Monitor security dashboards, SIEM platforms and threat‑intelligence feeds for emerging threats.
• Facilitate communication and reporting during incidents, including status updates and post‑incident reviews.
• Schedule and run tabletop exercises, red‑team/blue‑team drills and disaster‑recovery tests.
• Coordinate vulnerability assessment schedules, track remediation progress and enforce patching and configuration compliance.
• Assist with internal and external audits, regulatory assessments and certification activities (ISO 27001, NIST, SOC 2).
• Develop and present cybersecurity KPIs/KRIs and produce regular security operations reports.

Required profile

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science or a related field (or equivalent experience).
• 3–5 years of experience in security operations, incident response or related cyber‑security roles.
• Proven ability to coordinate cross‑functional teams and communicate technical information to non‑technical stakeholders.

Required skills

• Hands‑on experience with SIEM platforms and threat‑intelligence tools.
• Strong knowledge of incident‑response processes, playbooks and runbooks.
• Vulnerability management and patch‑management expertise.
• Familiarity with risk‑management frameworks and compliance standards such as ISO 27001, NIST and SOC 2.
• Ability to produce and analyse security metrics, KPIs and reports.