NCC Group

Global cyber security and resilience provider

Technical Account Manager

Implementation & Technical Account ManagementUpdated on Nov 13

Full-timeRijswijk, NetherlandsNo salary listedHybrid

About the Job

Requirements

Proven experience in cybersecurity, IT operations, or managed security services.
A background in a customer-facing technical role, such as Technical Account Manager or Security Consultant.
Experience engaging senior stakeholders, including CISOs and Heads of IT or Security.
Strong understanding of Security Operations Center operations, threat detection, and incident response.
Ability to understand end-to-end customer environments, including cloud, infrastructure, and security stacks.
Experience with security tools such as security information and event management, endpoint detection and response, security orchestration, automation and response, data loss prevention, and vulnerability management.
Ability to interpret and translate security metrics into clear, risk-based narratives.
Proven ability to build and maintain 12-month technical roadmaps with quarterly focus areas.
Strong data analysis and prioritisation skills, including identifying high-impact improvements.
Experience delivering Quarterly Business Reviews to senior audiences.
Ability to act as a trusted advisor and own the technical customer relationship.
Experience balancing reactive support, including tickets and troubleshooting, with proactive improvement.
Capability to deliver continuous improvement initiatives, including tuning, optimisation, and automation.
Experience creating technical deliverables, including playbooks, dashboards, analytics, and reports.
Knowledge of defensive security domains, including penetration testing, incident response, External Attack Surface Management, data loss prevention, and tabletop exercises.
Ability to identify security gaps and align solutions or services to mitigate risk.
Familiarity with service management practices such as ITIL and ticketing systems.

Responsibilities

Own the technical relationship by understanding the customer environment end-to-end, maintaining technical context, and serving as a trusted advisor in the partnership.
Own the TAM Score narrative by interpreting Environment, SOC, and Health scores into a credible account of the customer's status and priorities, and be accountable for the quality of diagnosis and recommendations rather than the absolute score.
Build and maintain a 12-month technical roadmap anchored to the TAM Score, with defined quarterly focus areas tied to the highest-leverage gaps.
Deliver the technical portion of Quarterly Business Reviews by presenting the score, narrating progress, and aligning with customer stakeholders up to CISO and senior IT leadership.
Deliver reactive technical support through tickets, including troubleshooting, investigation support, and remediation guidance.
Deliver proactive technical expertise and drive continuous improvement, including posture and coverage advice, tuning and noise reduction, cost and retention optimisation, and automation uplift.
Own technical deliverables, including automation and playbooks where in scope, custom analytics, and workbooks.
Drive the operational health-check catalogue as scheduled workstreams within the roadmap.
Advise on defensive breadth gaps such as penetration testing cadence, incident response retainers, External Attack Surface Management, data loss prevention, and tabletop exercises; surface risk credibly and identify where company services can close the gap.
Maintain and refresh the threat overview as the customer's environment and threat landscape evolve.

Desired Qualifications

Relevant certifications such as CISSP, CISM, Security+, or cloud security.

The TAM is the customer's technical owner for the service and the expert voice in the relationship. They quantify the customer's security maturity through the TAM Score framework, build and steer a defensible 12-month technical roadmap, and provide the depth of Microsoft Azure Sentinel/Defender XDR expertise needed to advise credibly on priorities. TAMs translate data into narrative - interpreting scores, surfacing the highest-leverage gaps, and guiding customers toward measurable improvement quarter by quarter. They act as a technical buffer between customers and internal operational teams by resolving technical queries, advising on improvements, and ensuring issues are properly packaged when escalation is required.

Own the technical relationship: understand the customer environment end-to-end, maintain technical context, and operate as the trusted advisor in the partnership.
Own the TAM Score narrative: interpret Environment, SOC, and Health scores into a credible story about where the customer stands and where to focus next - accountable for the quality of the diagnosis and recommendations, not the absolute score.
Build and maintain the 12-month technical roadmap: anchored to the TAM Score, with defined quarterly focus areas tied to the highest-leverage gaps.
Deliver the TAM/technical portion of Quarterly Business Reviews: present the score, narrate progress, and align with customer stakeholders up to CISO/senior IT leadership.
Deliver reactive technical support via tickets (troubleshooting, investigation support, remediation guidance).
Deliver proactive technical expertise and drive continuous improvement (Tier A included): posture and coverage advisory, tuning/noise reduction, cost/retention optimisation, automation uplift.
Own technical deliverables: automation/playbooks where in scope, custom analytics and workbooks.
Drive the operational health-check catalogue as scheduled workstreams within the roadmap.
Advise on Defensive Breadth gaps (pentest cadence, IR retainer, EASM, DLP, tabletops, etc) - surfacing risk credibly and identifying where NCC services can close the gap.
Maintain and refresh the threat overview as the customer's environment and threat landscape evolve.

Proven experience in cybersecurity, IT operations, or managed security services
Background in a customer-facing technical role (e.g. TAM, Security Consultant)
Experience engaging senior stakeholders (CISO, Head of IT/Security)
Strong understanding of SOC operations, threat detection, and incident response
Ability to understand end-to-end customer environments (cloud, infrastructure, security stack)
Experience with security tools (e.g. SIEM, EDR, SOAR, DLP, vulnerability management)
Able to interpret and translate security metrics into clear risk-based narratives
Proven ability to build and maintain 12-month technical roadmaps with quarterly focus
Strong skills in data analysis, prioritisation, and identifying high-impact improvements
Experience delivering Quarterly Business Reviews (QBRs) to senior audiences
Ability to act as a trusted advisor, owning the technical customer relationship
Experience balancing reactive support (tickets, troubleshooting) and proactive improvement
Capability to deliver continuous improvement initiatives (tuning, optimisation, automation)
Experience creating technical deliverables (playbooks, dashboards, analytics, reports)
Knowledge of defensive security domains (pentest, IR, EASM, DLP, tabletop exercises)
Ability to identify security gaps and align solutions/services to mitigate risk
Strong communication and storytelling skills, adapting for technical and non-technical audiences
Familiarity with service management practices (e.g. ITIL, ticketing systems)
Relevant certifications (e.g. CISSP, CISM, Security+, cloud security) – desirable
Proactive, accountable, and customer-focused mindset with strong ownership

About the Company

NCC Group

Global cyber security and resilience provider

NCC Group provides cyber security and resilience services to organizations and governments around the world. It helps protect digital systems by offering a range of capabilities such as security testing, risk assessment, and resilience planning, backed by a global team of experts and supported by technology-enabled tools. The company’s approach combines human expertise with technical solutions to identify vulnerabilities, assess risk, and implement concrete steps to improve security and continuity. What sets NCC Group apart is its large, worldwide team and its emphasis on practical, end-to-end cyber resilience—working with clients from assessment through to implementation and ongoing assurance. The goal is to create a more secure digital future by helping customers manage cyber risk, reduce threats, and maintain business continuity at scale.

Company size: 1,001-5,000
Company stage: IPO
Headquarters: Manchester, United Kingdom
Founded: 1999

Recently Posted Jobs

Explore more opportunities at NCC Group

See more jobs