Overview of the role

The Manager, Security Operations Centre (SOC) is responsible for the overall delivery and development of the SOC product roadmap, ensuring WestJet’s Security Operations Centre operates as a consistent, value-driven, and strategically aligned service. 

This role drives service enhancement, operational maturity, and business capability across the SOC. It plays a critical role in protecting WestJet by ensuring strong cybersecurity monitoring, incident detection, response, and threat-hunting capabilities, all aligned to WestJet’s cybersecurity strategy and enterprise priorities. 

Key deliverables / responsibilities include 

• Lead and oversee the 24/7/365 Security Operations Centre, ensuring effective detection, response, and management of cybersecurity incidents 

• Own and deliver the SOC service roadmap, aligned to cybersecurity strategy and business needs 

• Build and maintain a continuous service improvement backlog focused on improving security incident detection, response, and threat-hunting capabilities in partnership with Cybersecurity teams 

• Manage the relationship with a Managed Service Provider (MSP) responsible for day-to-day SOC operations, including: 

• Understanding operational activities and service offerings 

• Addressing resourcing challenges and performance issues 

• Ensuring delivery against defined contractual services, outcomes, and KPIs 

• Escalating issues as required to protect service integrity 

• Cultivate strong partnerships with key 24/7 operations teams (Major Incident Management, IT Service Desk, and IT Operations Centre) to enhance service alignment and operational effectiveness 

• Partner with Enterprise Monitoring to drive integrated observability and ensure SOC workflows are aligned to enterprise monitoring capabilities 

• Drive business- and cybersecurity-led process improvements through clear reporting and operational metrics, including MTTD and MTTR 

• Ensure SOC processes and practices align with industry standards and frameworks, including NIST CSF, ISO 27001/27002, PCI-DSS, and ITIL 

• Develop and deliver Cyber Security Incident Response (CSIRT) training and awareness programs 

• Ensure alignment between cybersecurity incident response and broader enterprise processes, including Major Incident Management, Disaster Recovery, and Business Continuity 

• Provide people leadership for 15–24 employees, including coaching, performance management, and team development 

• Participate in an on-call rotation to support operational incidents and ensure continuity of SOC services 

Experience and qualifications 

• Bachelor’s degree in a related field or equivalent practical experience 

• 3–6 years of experience in cybersecurity operations, security monitoring, or incident response 

• Proven experience leading or managing operational security services, ideally in a 24/7 environment 

• Experience managing third-party or managed service providers 

• Strong understanding of SOC operations, incident response, and threat-hunting practices 

• Demonstrated experience working with cybersecurity frameworks and standards (NIST, ISO 27001/27002, PCI-DSS, ITIL) 

• Required certifications: SAFe, POPM, CISSP, or CISM 

• Strong leadership, decision-making, and stakeholder management skills in fast-paced, operationally critical environments