Sr. Manager, IT Security Operations

What does a Sr. Manager of IT Security Operations do at Swire Coca - Cola?Swire Coca-Cola is seeking a Sr. Manager, IT Security - Operations to lead and mature the organization's security operations capabilities. This role is responsible for overseeing the detection, response, and remediation of cybersecurity threats while ensuring the stability and continuous improvement of core security services. The Sr. Manager will lead Security Operations, Incident Response, Vulnerability Management, Identity & Access Management and Monitoring functions, ensuring the organization can effectively identify and respond to evolving threats. This role partners closely with Security Architecture, GRC, IT Infrastructure, and business teams to ensure operational security controls are aligned with enterprise risk priorities. This position requires a strong leader with deep technical expertise, operational discipline, and the ability to translate complex security events into clear business impact for leadership. The ideal candidate will bring a balance of hands-on operational experience and strategic leadership to drive continuous improvement across the cybersecurity program.ResponsibilitiesLead and oversee Security Operations (SOC) activities, including monitoring, detection, and alert triageEnsure effective operation of security tools such as SIEM, EDR, NDR, and related monitoring platformsContinuously improve detection capabilities through tuning, use case development, and threat intelligence integrationEstablish and maintain operational runbooks and standard operating proceduresLead incident response activities, including investigation, containment, eradication, and recoveryEnsure incident response processes are well-defined, tested, and continuously improvedOversee root cause analysis and post-incident reviews to strengthen controlsCoordinate with legal, communications, and leadership during high-impact incidentsLead the vulnerability management program, including scanning, prioritization, and remediation trackingPartner with IT and application teams to reduce exposure and improve patching effectivenessLead the design and continuous improvement of IAM capabilities, including identity lifecycle management (Joiner/Mover/Leaver), authentication, and authorization aligned with least privilege principlesLead, mentor, and develop cybersecurity operations team membersOversee the implementation, integration, and optimization of security technologiesEnsure security tools are configured, maintained, and delivering valuePartner with Security Architecture on tool selection and roadmap planningDrive automation and efficiency within security operations workflowsTrack and report on vulnerability trends and remediation metricsImplement and manage access control models (RBAC/ABAC), MFA, conditional access, and privileged access management (PAM) to secure enterprise identitiesOversee identity governance processes, including access reviews, certifications, role design, and segregation of duties (SoD) controlsPartner with cross-functional teams to integrate IAM solutions, drive automation, and report on key metrics such as provisioning timelines, access risks, and compliance statusDevelop and deliver operational metrics, dashboards, and reporting for leadershipTrack KPIs such as detection time, response time, and remediation timelinesProvide clear, actionable reporting on threats, incidents, and operational risk postureDrive continuous improvement initiatives across operational processesEstablish risk-based prioritization aligned to business impact and threat intelligencePartner with GRC, Security Architecture, IT, and business stakeholdersSupport cross-functional incident response coordination and tabletop exercisesFoster a culture of accountability, continuous learning, and operational excellenceRequirementsBachelor’s Degree in Cybersecurity, Information Technology, Computer Science, or related field requiredCertifications such as CISSP, CISM, or GIAC preferred8+ years of cybersecurity experience, focused on operations, incident response, or threat management required3+ years of leadership experience managing security teams or programs requiredStrong experience with SIEM, EDR, vulnerability management, and detection tools requiredExperience leading vulnerability management and remediation programs requiredExperience developing metrics, dashboards, and executive reporting requiredDeep understanding of incident response methodologies and frameworksStrong analytical and problem-solving skillsExcellent communication skills translating technical issues into business impact#LI-HH1JobFamilyInformation TechnologyPayTypeSalary