- strategic leadership: develop and implement the global SOC vision, strategy, and roadmap aligned with the bank’s overall cybersecurity objectives,
- operational oversight: direct 24/7 SOC operations, including threat monitoring, incident detection, response, and escalation procedures,
- team management: lead, mentor, and build a high-performing global SOC team; foster a culture of continuous learning and improvement,
- technology and process: oversee the selection, deployment, and optimization of security monitoring tools, SIEM solutions, and automation platforms,
- incident management: coordinate the response to major security incidents, ensuring timely communication and resolution
- collaboration: work closely with IT, risk management, compliance, and business units to ensure effective incident response and risk mitigation,
- metrics and reporting: define SOC KPIs, deliver regular reports to executive leadership, and recommend improvements,
- compliance: ensure SOC operations comply with relevant regulations, and internal policies (e.g., FFIEC, GDPR, SOX). Represent SOC in discussions with internal and external auditors
Additional information:
The role reports to the Global Head of Security Detection and Response and collaborates with local SOC teams, IT, risk management, and executive stakeholders across multiple locations. The Global Head of Security Operations Center (SOC) will be responsible for establishing and leading the bank’s worldwide SOC strategy, operations, and capabilities. This managerial role ensures the protection of the organization’s digital assets and information systems through effective monitoring, detection, response, and mitigation of cyber threats.
The role naming convention in the global ING job architecture will be “IT Area Lead II”
Possible locations: Warsaw, Katowice
