Overview of the role Phoenix enables digital transformation in the workplace, empowering UK organisations to innovate and transform with cloud and hybrid infrastructures, data, AI, security, and collaboration tools. We are now very excited to hire a new SOC Manager who will be responsible for overseeing the day-to-day operations and management of our 24x7x365 SOC team. What will you be doing? Lead and manage a 24/7/365 SOC operation (25 people strong), ensuring consistent, high‑quality delivery. Act as the primary escalation point for major incidents, providing calm and decisive leadership. Coach, mentor, and develop SOC staff; manage performance and training. Ensure SLAs are met; drive corrective actions when they are not. Maintain customer satisfaction through proactive engagement, expectation management and issue resolution. Oversee SOC tools and vendor relationships, optimising performance and cost. Keep SOC documentation, processes and playbooks up to date and effective. Identify opportunities to improve efficiency, service quality and automation. Prioritise and manage workstreams and projects against customer needs. Ensure compliance with regulatory requirements and internal security policies. Manage third‑party providers supporting SOC services. Collaborate with other teams across the business to align SOC with Phoenix’s broader strategy. Why should you apply? At Phoenix, our philosophy is simple – we aim to be the UK’s leading IT solution and managed service provider and that means we recognise that it’s our people who are the heart of everything we do. We do this by providing the encouragement, support and skill development that you need to be the very best you can be at work. We are proud of our culture, so much so that we have developed our Culture Blueprint which you can read here. What are we looking for? The right person for this role will have proven leadership experience. You will be able to demonstrate how you have led a SOC of a similar size at an MSP. Key Skills & Experience: Strong leadership, mentorship, and team-building skills. Minimum 5 years experience managing 24/7 SOC operations and handling escalated security incidents. Hands-on experience with Microsoft Sentinel, KQL, SOAR platforms, and other security tools (SIEM, IDS/IPS, EDR). Solid knowledge of the Microsoft ecosystem (Windows, EntraID, Office 365, Azure) and security integrations. Skilled in digital forensics, threat intelligence, and incident investigation. Understanding of current cybersecurity threats, vulnerabilities, and attack techniques. Experience with ITSM tools and processes. Excellent analytical, problem-solving, and decision-making abilities under pressure. Strong communication skills, able to explain technical security issues to both technical and non-technical audiences. Commercial awareness and customer-focused approach. Positive, can-do attitude with common sense and pragmatism. Practical stuff Where is the role based? Our HQ is in Pocklington (YO42) and we have a preference for those that can work on a hybrid basis however remote in the UK could be considered too. What about Security Clearance? SC clearance is a requirement for this role, you do not need to have it already but must have the ability to gain it. (5 years living in the UK, no criminal record) How many interviews? Following a screen with the Recruitment Team you can expect a two-stage interview process, one online and one in-person. What are the benefits? You can read about the benefits on offer here Have you made it this far? If you’re still reading, we think there’s a strong chance you might be our kind of person. Here’s the thing, though — research suggests that 60% of women and underrepresented people might have already talked themselves out of applying. Even if you don’t check every box above, we want to encourage you to introduce yourself. We believe a diversity of perspectives and experiences makes a team stronger — and the stronger our team, the more successful we will be.