About us

With over 200 brands sold in nearly 180 countries, Diageo is home to some of the world’s most iconic drinks. From Johnnie Walker and Guinness to Tanqueray, Smirnoff and Don Julio, we craft brands chosen for life’s moments — from everyday connections to landmark celebrations. 

Bring your talent, curiosity and ambition, and strive for your personal best alongside people who challenge, support and learn from each other. Together, as one outstanding team, we keep learning, improving and raising the bar for our brands, our business and each other. 

Join us and play your part in making life’s moments mean a little more.

About the Function: 
   
Digital & Technology (D&T) is transforming how Diageo works, from how we source ingredients to how we connect with customers and consumers around the world. 

This is where data, technology and creativity come together to solve real business challenges and unlock new opportunities. Whether it’s building platforms, using data to drive decisions or shaping digital experiences, the work here has tangible impact across every part of our business. 

You’ll be part of a team that’s constantly learning, experimenting and pushing boundaries, with the freedom to explore new ideas and the support to turn them into reality. 

About the role:

The SOC Manager is responsible for leading and managing Security Operations Center (SOC) functions, ensuring effective 24×7 monitoring, detection, incident response, and threat hunting across enterprise IT, cloud, OT, and digital environments. This role focuses on operational excellence, team leadership, incident readiness, and continuous improvement, while aligning SOC activities with enterprise cybersecurity strategy and business objectives.

Key Responsibilities

SOC Leadership & Operations

·       Lead day-to-day SOC operations, ensuring continuous monitoring, detection, and response to security events and incidents.

·       Manage L2/L3 SOC analysts, incident responders, and threat hunters, fostering a high-performance culture.

·       Ensure adherence to incident response SLAs, escalation paths, and communication protocols.

·       Act as the incident commander for major cyber incidents, coordinating technical response and stakeholder communication.

Incident Response & Threat Management

·       Oversee incident triage, investigation, containment, eradication, and recovery activities.

·       Conduct root-cause analysis and ensure corrective and preventive actions are implemented.

·       Lead threat hunting activities using frameworks such as MITRE ATT&CK to identify advanced and stealthy threats.

·       Coordinate post-incident reviews and lessons-learned sessions.

Technology & Platform Management

·       Own and optimize SOC technologies including SIEM, SOAR, EDR/XDR, NDR, and threat intelligence platforms.

·       Drive use-case development, tuning, and automation to reduce false positives and improve detection fidelity.

·       Partner with engineering and IT teams to onboard new log sources and improve telemetry quality.

·       Ensure SOC tooling aligns with enterprise architecture and cybersecurity strategy.

Process, Metrics & Continuous Improvement

·       Define, track, and report SOC KPIs and metrics (MTTD, MTTR, alert quality, incident trends).

·       Drive continuous improvement initiatives using data, automation, and process optimization.

·       Maintain and improve SOC playbooks, runbooks, and standard operating procedures.

·       Support tabletop exercises, red-team/blue-team simulations, and readiness testing.

Collaboration & Stakeholder Management

·       Collaborate with GRC, IAM, Security Architecture, Cloud, OT, and Product Security teams.

·       Act as a key liaison between SOC and IT, engineering, and business stakeholders.

·       Support audits, regulatory inquiries, and risk assessments by providing operational evidence.

·       Engage with vendors, MSSPs, and service providers, ensuring contractual SLAs are met.

People Development & Culture

·       Recruit, onboard, and mentor SOC talent.

·       Build career paths, training plans, and succession strategies for SOC staff.

·       Foster a culture of learning, innovation, accountability, and resilience.

·       Promote security awareness and collaboration across the organization.

Required Qualifications

·       Bachelor’s degree in Computer Science, Information Security, Engineering, or related field.

·       8–12+ years of cybersecurity experience with 5+ years in SOC / incident response leadership.

·       Strong hands-on experience with SIEM/SOAR platforms and security monitoring tools.

·       Proven experience leading major cyber incidents in enterprise environments.

·       Strong understanding of threat frameworks (MITRE ATT&CK) and attack methodologies.

·       Experience working with globally distributed teams and 24×7 operations.

Preferred Qualifications

·       Certifications such as CISSP, CISM, GCIA, GCIH, CRISC.

·       Experience with cloud security monitoring (AWS/Azure/GCP).

·       Experience managing MSSPs or outsourced SOC models.

·       Strong executive communication and reporting skills.

Working with us

Flexibility is key to our success. Talk to us about what flexibility means to you, so that you’re supported to manage your wellbeing and balance your priorities from day one. 

We recognise and value performance, offering our people a highly competitive Rewards and Benefits package including: 

Our purpose is crafting iconic drinks chosen for life’s moments. And it’s our people, with their different experiences, perspectives and talents, who make that possible. 

We value diversity in its broadest sense and want everyone to feel they can belong, contribute and strive for their personal best. You’ll work alongside people with different backgrounds, experiences and perspectives — challenging, supporting and learning from one another as one outstanding team. 

Together, we’re constantly learning and improving, combining the strength of our people, capabilities and iconic brands to raise the bar, grow and win. Wherever you join us, you’ll have the opportunity to contribute, make an impact and play your part in making life’s moments mean a little more. 

Ready to bring your best? This could be your opportunity. 

If you require a reasonable adjustment, please ensure that you capture this information when you submit your application. 

Recruitment Scam Warning

Protecting candidates is very important to us. All communications regarding your application will come from an email address ending in @diageo.com. In our recruitment process, we'll never ask for money.