Security Operations Manager

*This is an evolving and developing role so responsibilities may change over time*

Reporting to the Head of Information Security, the Security Operations Manager leads An Post’s cyber security operations capability, protecting information assets, technology platforms and business services across postal, parcels, retail and financial services.

Working with our managed Security Operations Centre (SOC), technology teams, business stakeholders and strategic suppliers, the role provides leadership across security monitoring and detection, incident response, vulnerability and exposure management, threat intelligence, security tooling and operational security governance.

The role is accountable for ensuring security services are delivered effectively, operational risk is managed proactively, and security operations remain aligned to the evolving threat landscape, and regulatory obligations.

The Security Operations Manager will lead a team of security specialists, build a culture of measurable continuous improvement, and act as operational lead during significant cyber incidents.

The primary accountabilities associated with this role include but are not limited to the following:

Security Operations Leadership

• Lead the day-to-day operation of An Post’s security operations capability, ensuring 24x7 coverage and clear operational accountability.

• Develop and execute the Security Operations roadmap in alignment with the Information Security strategy and target operating model.

• Manage the security operations budget, resourcing plan and capability development priorities.

• Provide leadership, coaching and professional development to the Security Operations team, including succession and retention planning.

• Foster a high-performance culture focused on operational excellence, collaboration and continuous improvement.

Threat Detection & Incident Response

• Ensure effective triage, investigation and response to cyber threats and incidents across on-premise, cloud, identity and end-user environments.

• Act as operational lead during cyber incidents, coordinating response across internal teams, suppliers, and business and communications stakeholders.

• Own the detection engineering lifecycle, ensuring use cases and detection content are mapped to MITRE ATT&CK and reviewed for coverage and efficacy.

• Oversee incident investigations, forensic readiness, post-incident reviews and tracking of remediation actions to closure.

• Ensure incident response plans, playbooks, escalation paths and crisis communication routes remain current, tested and effective.

• Ensure incident reporting obligations (including regulatory and Data Protection notification timelines) are met and evidenced.

Managed SOC & Supplier Management

• Own the relationship with the outsourced 24x7 SIEM and other security service providers.

• Monitor supplier performance against agreed service levels, KPIs and contractual obligations, and manage service reviews and escalations.

• Drive service improvement initiatives with technology partners and suppliers, including detection tuning, coverage expansion and automation.

• Ensure operational processes deliver measurable value from security tooling and managed service investments.

Vulnerability & Exposure Management

• Oversee vulnerability management across infrastructure, cloud, applications and end-user environments.

• Maintain visibility of the external attack surface, including internet-facing assets, domains and third-party exposure.

• Provide input to governance and reporting that drives accountability for remediation across technology and business owners.

Security Tooling & Technology

• Manage the operational effectiveness of security technologies including SIEM, SOAR, EDR/XDR, identity and privileged access security, email and web security, data protection and threat detection platforms.

• Drive automation and orchestration to reduce manual effort and improve mean time to detect and respond.

• Ensure logging, telemetry and detection coverage keep pace with changes to the technology estate.

• Work closely with Security Architecture, Infrastructure, Cloud and Application teams to strengthen preventative and detective controls.

• Assess the operational security implications of emerging technologies, including AI and agentic AI services, and ensure appropriate monitoring and controls.

Operational Governance, Risk & Reporting

• Develop and maintain operational security metrics, dashboards and management reporting, including KPIs and KRIs with defined thresholds.

• Report on security performance, incidents, vulnerabilities, trends and risks to senior management and relevant governance forums.

• Maintain operational security risks on the risk register, with clear owners, treatment plans and escalation routes.

• Support internal audit, external audit and regulatory compliance activities, providing evidence and remediating findings.

• Ensure security procedures, standards and operational documentation remain current, controlled and effective.

Continuous Improvement & Resilience

• Identify and deliver improvements to security operations maturity, efficiency and resilience against a recognised maturity model.

• Monitor emerging threats, technologies and industry practices, and translate these into operational change.

• Lead operational readiness activities including tabletop exercises, incident simulations and coordination with business continuity and crisis management.

• Support the secure transition of new capabilities and services into operational support.

• Demonstrate An Post Values and behaviours in your day to day work and addressing behaviour that supports/ conflicts with them.

• 7+ years’ experience in cyber security, information security or security operations roles with 3+ years’ experience leading technical security teams or security operations functions.

• Hands-on experience managing security incident detection, investigation and response activities, including major incidents.

• Experience working with outsourced SOC providers and managed security services in an intelligent client capacity.

• Experience in vulnerability management, threat management and security operations process design.

• Strong understanding of enterprise security controls across cloud, infrastructure, networks, identity and end-user computing.

• Experience delivering security reporting, metrics and operational governance to senior stakeholders.

• Experience working in a regulated, critical infrastructure or high-availability operational environment.

• The following are desirable qualifications/certifications:

  • Degree in Cyber Security, Information Technology, Computer Science, or equivalent professional experience.

  • CISSP, CISM, CRISC

  • GIAC certifications (e.g. GCIA, GCIH, GCFA)

  • Microsoft Security certifications (e.g. SC-200, AZ-500)

  • ITIL Foundation

Critical Competencies (The following competencies are critical to the delivery of results and/or superior performance in this role)

• Technical & Professional Knowledge

• Leadership

• Problem Solving & Analysis

• Quality & Customer Focused

• Perseverance/Resilience

Salary

Salary range starting from €80,638 .Placement within the range reflects experience, skills, proficiency in the role, and internal alignment. Progression over time is linked to performance, development, and expansion in role scope.

Benefits

• An Post Company Medical Scheme
• An Post Pension Scheme
• PRIP Bonus Scheme
• Paid Maternity Leave
• Paid Paternity Leave
• An Post Employee Assistance Programme
• Digital gym with daily scheduled workouts
• Secure on-site bicycle parking & Cycle to Work Scheme
• Tax Saver Travel Pass
• City Centre location

How to Apply?

We welcome all interested candidates to submit a detailed CV by 5.00pm on Thursday 5th November 2026.

At An Post we appreciate the value that diversity brings and believe our workforce should be reflective of the customers and communities we serve. That is why we actively welcome applications from people from all backgrounds, and do not discriminate based on gender, age, race, religion, marital status, sexual orientation, disability, membership of the Travelling community, or family status. We are committed to having an inclusive workplace where every employee feels they belong. If you require accommodations to be made during the recruitment process, or have questions relating to accessibility, please contact [email hidden]

About An Post

An Post is one of Ireland’s leading organisations, offering financial and postal services as well as being a trusted gateway to government services. We are transforming from the old world of traditional letters and cash to the new digital world of e-commerce parcels and financial services.

An Post’s core purpose — to act for the common good, improving the lives of people in Ireland, now and for generations to come — is aligned with the United Nations Sustainable Development Goals, putting sustainability at the centre of everything we do. Corporate Social Responsibility plays a pivotal role at An Post as we focus on developing long-term sustainability. Diversity and Inclusion are also embedded in our strategy, as we continuously evolve to be representative of our employees and the communities we serve. Read more about our strategy and our progress today!