AI Job Summary

Significant hands-on cyber or security operations experience with ownership of security outcomes.
Experience across multiple domains, including incident response, vulnerability management, access controls, endpoint security and monitoring
Experience balancing security with business and customer needs in live operational environments.

Role Type

Permanent • Full-time • Senior

Description

Cyber Security Operations Manager

Location: Hamilton International Technology Park

Reports to: Chief Technology Officer

About DataVita

DataVita is a next-generation cloud and infrastructure company operating from Tier III-certified data centres in Scotland. We work at the bleeding edge of AI adoption, automation, and how these technologies can be integrated into complex legacy environments to deliver genuine transformation.

Most of our customers do not come to us for a single product. They come to us because they have a range of problems across cloud, infrastructure, security, and operations that need solving together. Yes, we deliver managed cloud, backup, disaster recovery, and colocation.

We are also leading the development of the Lanarkshire AI Growth Zone (AIGZ), delivering up to 500MW of AI-ready data centre capacity powered by private-wire renewable energy.

DataVita is the fastest growing technology company in Scotland, with plans to deploy and invest over £2 billion in the coming years. You would be joining at a relatively early stage of that trajectory.

Working at DataVita

DataVita is growing quickly, and this is an opportunity to help shape how security develops within a business undergoing significant transformation.

We value people who are naturally curious about technology, take the initiative to solve problems, and are comfortable challenging established ways of working when there is a better approach.

You should enjoy working in an environment where priorities can evolve, not every answer is immediately obvious, and people are expected to take ownership rather than wait for direction.

We are looking for someone who wants to help build and improve something, takes personal responsibility for outcomes, cares about the customer experience, and is motivated to keep learning as technology evolves

About the Role

Reporting to the Chief Technology Officer, you will own and improve DataVita’s real-world security posture. This role is about making things more secure, not writing reports about why they need to be.

You will work across compliance, platform, infrastructure, service, and leadership teams to make sure security controls are actually working in practice. That means getting into the detail of incidents, vulnerabilities, access, logging, monitoring, hardening, supplier risk, and assurance, then driving issues through to a real outcome. You will turn policies, frameworks, customer commitments, and audit requirements into controls and routines that hold up in a live environment.

You will bring the judgment to tell a theoretical issue from a real weakness or an emergency. You will respond in proportion: sometimes with decisive intervention, sometimes with containment, close monitoring, and a root-cause fix that avoids unnecessary disruption. You’ll have the technical depth to earn credibility with engineers and the judgment to work well with compliance, audit, and business stakeholders. You will be comfortable challenging weak practice and stepping onto the front line when it matters.

You will also look at security through the lens of AI in a practical way. That includes using it to improve detection, triage, investigation, and control assurance, and understanding the risks AI brings as the business adopts it.

DataVita is scaling quickly across cloud, infrastructure, managed services, customer environments, and critical facilities. Success means a measurably more secure business: fewer vulnerabilities, incidents handled properly, controls working in practice, and no weaknesses left unowned.

Key Responsibilities

Own DataVita’s day-to-day security posture across cloud, infrastructure, managed services, customer environments and critical facilities.
Lead the response to security incidents, judging how credible and serious each one is and acting in proportion, from immediate intervention to controlled containment and root-cause fixes.
Find, prioritise and reduce vulnerabilities, working with technical teams to unblock fixes and see them through.
Make sure access control, endpoint security, hardening, patching, logging and monitoring work in practice, not just on paper.
Turn policies, standards, frameworks, audit requirements and customer commitments into controls and routines that work in a live environment.
Check regularly that security controls are working as intended, and make sure every weakness has an owner and a plan.
Assess and manage the security risks that come from third-party suppliers and services.
Use AI to improve detection, prioritisation, triage, investigation and assurance, and advise on the security risks of adopting AI across the business.
Partner with compliance, platform, infrastructure, service and leadership teams, challenging weak practice and raising standards.
Keep the CTO informed of security posture, key risks and progress, focusing on outcomes rather than activity.

Essential Experience

Significant hands-on experience in cyber security, security operations, or operational security roles where you were expected to take ownership and improve outcomes directly.
Broad real-world experience across multiple security domains, not just one area of specialism. This should include a meaningful mix of incident response, vulnerability management, access control, endpoint security, hardening, patching, logging, monitoring, and control improvement.
Experience working in live operational environments where business reality, customer commitments, service delivery, and security all have to be balanced properly.
Experience working directly with technical teams to identify weaknesses, unblock remediation, improve standards, and raise the bar in practice.
Experience turning policies, frameworks, or compliance requirements into operational controls and routines that actually work.
Clear evidence of independent judgment, ownership, and the ability to make proportionate decisions under pressure without close supervision.
Evidence that you are already thinking differently because of AI, whether through improving operational efficiency, strengthening analysis and triage, enhancing detection and investigation, or helping the business adopt new ways of working safely.

Desirable Experience

Experience in a managed service provider, cloud, infrastructure, hosting, or data centre environment.
Experience supporting ISO 27001, Cyber Essentials, customer due diligence, audits, or contractual security obligations.
Experience with SIEM, EDR, vulnerability management tooling, Microsoft 365 security, IAM, network security controls, and ITSM platforms.
Experience helping onboard new services, platforms, or material operational changes securely.
Relevant security certifications.

What You Will Get

Career & Growth

A business with serious market momentum and a nationally significant infrastructure pipeline.
Exposure to cloud, colocation, HPC, and AI. This is not a single-product company.
Clear progression as the business scales.
Training and development throughout your time at DataVita.

Benefits