Senior Director of Security Operations

.

Director of Security Operations

Super is looking for a Director of Security Operations to define and own the strategy for how the entire organisation defends, sees, and responds to threats — across every business unit, country, and platform, in a genuinely adversarial environment with real financial motive behind the attacks we see. This is a leadership role reporting to the CISO, with an organisation-wide mandate to set the operating model, make the resourcing case to leadership, and be accountable for outcomes, with a mandate to implement and enforce controls rather than just recommend them. You'll build on a strong existing foundation — real coverage, a capable team, and a proven incident response track record — turning it into a strategic capability the rest of the business can build on.

What the role involves

Defences everywhere

• Set the organisation's strategy for defensive controls (WAF, EDR, endpoint security, network segmentation, cloud-native controls) across every business unit and country, and make the investment case to leadership
• Hold every part of the business accountable to a consistent bar for control effectiveness

Visibility everywhere

• Define and drive "full visibility" as a company-wide standard across cloud, Kubernetes, endpoints and SaaS, identifying structural blind spots before they cause incidents

Fast, appropriate response

• Own the strategy and operating model for detection engineering, threat hunting and incident response as one connected capability, setting the standard for response speed and severity handling

Organisational leadership

• Lead a team spanning incident response, threat hunting and detection engineering, while setting standards for security and engineering functions company-wide
• Represent security operations posture directly to executive leadership and the board, and drive resourcing and tooling decisions

What we are looking for

Experience

• 10+ years in security operations, incident response, threat hunting or detection engineering, with a demonstrated track record setting strategy at director/senior-director level for a multi-country, multi-business-unit organisation, including getting resourcing decisions actioned by senior leadership
• History of building the case for investment and having it land — able to quantify risk and translate it into decisions leadership acts on

Technical depth

• Hands-on fluency with EDR (e.g. CrowdStrike, SentinelOne), SIEM and WAF platforms, sufficient to evaluate strategy and vendor decisions critically
• Strong grounding in cloud-native security: AWS security services, Kubernetes/container security, CSPM/CWPP tooling (we run Wiz)
• Deep incident response background: forensics, containment, IAM/credential response, with the credibility to step into a major incident and be trusted immediately by team and executive stakeholders
• Working knowledge of detection engineering and threat intelligence integration
• Familiarity with attack surface and exposure management at an organisational level

Leadership & communication

• Comfortable owning a narrative in front of the board, not just briefing up to the CISO
• Track record of hiring and developing senior technical talent, and of influencing security posture in teams and business units outside your own reporting line
• Executive presence combined with enough technical credibility that your own team trusts your calls under pressure

Nice to have

• Experience owning security operations in regulated or high-fraud-risk industries (gaming, fintech, payments)

What we offer

• Medical / Health Insurance
• Open Annual Leave
• Employee Assistance Programme
• Training & Learning Development

Additional benefits vary by country and will be shared during the hiring process.