Director – Intelligence-Led Security Operations Centre (SOC)

Position Description

At CGI, we help organisations make confident, informed decisions about cyber resilience. As our SOC Solutions & Cyber Advisory Lead, you will sit at the heart of our intelligence-led SOC services, shaping solutions that balance technical excellence with real-world business outcomes.

Working directly with clients and internal experts, you’ll influence how services are designed, sold, and delivered, ensuring they are robust, scalable, and aligned to client risk and maturity.

You’ll be trusted to lead with insight, encouraged to think creatively about service evolution, and supported by a collaborative culture that enables you to make a meaningful, lasting impact.

If you thrive in high-tempo environments, understand the commercial and operational realities of multi-customer SOC delivery, and want to shape the next evolution of intelligence-led security operations, this role offers the autonomy, scale, and strategic influence to do exactly that.

Due to the secure nature of the programme, you will need to hold UK Security Clearance or be eligible to go through this clearance. This is a hybrid position.

Your future duties and responsibilities

As Director of Intelligence-Led SOC, you will:

• Define and execute the strategic vision for an intelligence-led SOC capability across multiple customer environments
• Lead and develop SOC and technical leads, building a high-performance, accountable culture
• Drive operational maturity through intelligence-driven detection, response, and threat management
• Own end-to-end SOC service delivery across multi-tenant customer estates
• Optimise SIEM and SOAR platforms (e.g., Splunk, Sentinel, ArcSight, Fortinet)
• Oversee full incident lifecycle: detection, triage, response, escalation, crisis management, PIRs
• Embed operational standards aligned to ITIL, NIST, MITRE ATT&CK, ISO 27001, CREST
• Act as executive point of contact for clients and senior stakeholders
• Maintain readiness for audits, certifications, and compliance requirements
• Own budget, forecasting, and resource planning for SOC operations
• Drive automation, innovation, and continuous improvement to reduce dwell time

Required qualifications to be successful in this role

You will bring:

• Proven leadership of large-scale SOC operations (MSSP/MSP or multi-tenant environments)
• Experience transforming SOC capability into intelligence-led operating models
• Strong executive leadership and team development capability
• Deep incident management and crisis leadership experience
• Strong SIEM/SOAR expertise
• Working knowledge of NIST, MITRE ATT&CK, ISO 27001, CREST, ITIL
• Commercial experience (budgeting, forecasting, resource management)
• Ability to translate technical cyber risk into clear business outcomes
• Experience engaging C-level stakeholders

Together, as owners, let’s turn meaningful insights into action. Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because… You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction. Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise. You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons. Come join our team—one of the largest IT and business consulting services firms in the world.