Operations Lead

The Operations Lead for the APAC region operates in close partnership with other Operations Leads globally to collectively own the delivery of security monitoring services. This role provides technical leadership and direction for how security events are analyzed, the standards applied, and the tooling and workflows that enable effective operations. Together, the leads are accountable for the overall quality, performance, and continuous evolution of the service. While day‑to‑day analyst coordination and shift management are handled by each respective regional operations lead, this role shares responsibility with peers for service outputs, consistency, maturity, and continuous improvement. Responsibilities Collaborating with Operational Leads globally to ensure delivery, quality, and consistency of security services across all regions, including defining shared success measures and operational performance indicators. Co-develop and uphold analytical, investigative, and escalation standards with peer leads, ensuring depth analysis, evidence quality, and risk-based prioritization. Partner with Incident Response and other related functions to define and maintain clear escalation pathways. Contribute to and help govern the technical workflow and operational use of SIEM, SOAR/automation, and AI platforms alongside service leads across Security Operations and wider ISO. Working with Operational leads to identify, prioritize, and deliver automation and AI opportunities that enhance analysis quality, speed, and consistency. Coordinate analysts and shift teams to maintain global service coverage and resolve operational blockers Co-lead the improvement roadmap, using operational data and trend analysis to enhance processes, documentation, and detection feedback loops. Use metrics, Quality Assessment, and trends to measure service maturity, demonstrate value, and drive data‑informed prioritization of improvements. Serve as a key interface, in partnership with other services such as Security Operations Enablement, Incident Response, and resolver teams to ensure smooth service integration. Collaboratively represent the service in operational, risk, and governance forums, aligning messaging with peer leads on capabilities and priorities.