Cyber Security Operations Manager

Cyber Security Operations Manager

Azienda : Evs Ltd Tipo Lavoro : Full Time Italy

Descrizione Lavoro - Cyber Security Operations Manager

Scope

We are looking for a Cyber Security Operations Manager to join the IT Security team within the IT Corporate department, responsible for the operational execution and coordination of cybersecurity activities across the organization. This hands-on role acts as the primary link between IT operational teams (Infrastructure, Support, Applications) and governance/compliance (CISO Advisor), focusing on security operations, incident response, detection, vulnerability management, and remediation. The manager translates cybersecurity policies into concrete day-to-day processes, tools, and operational behaviors, working closely with all IT teams — though this is not a governance or policy-driven role, nor does it include direct administration of infrastructure components (firewalls, switches, servers), which remain with the Infrastructure & Digital Platforms teams.

The Cyber Security Operations Manager also has direct managerial responsibility over Cyber Security Analysts, overseeing their development, performance, and alignment with operational security objectives, while promoting a Shift Left approach that delegates low-complexity or repetitive tasks (e.g. basic alerts, endpoint maintenance, access requests) to first-level support where appropriate. As EVS is an NIS2 Essential Entity under Belgian law currently pursuing ISO/IEC 27001:2022 certification (target: April 2027), this role contributes directly to operational compliance, control implementation, and audit readiness.

Job Description

Security Operations & Incident Response

• Oversee day-to-day security operations, including SOC activities and threat monitoring
• Ensure effective detection, alert triage, escalation, and response to security incidents
• Coordinate incident response efforts across IT teams and external partners
• Take part in post-incident reviews and forensic analyses to strengthen organizational resilience

Vulnerability & Remediation Management

• Organize and support internal and external penetration testing engagements
• Track remediation plans and ensure proper follow-up through to closure
• Run and continuously refine vulnerability management processes and supporting tools

Security Tooling & Monitoring

• Deploy, operate, and fine-tune security solutions (e.g. SIEM, vulnerability scanners, EDR-related tooling)
• Ensure these solutions are properly calibrated, monitored, and aligned with operational needs
• Work with the SOC and service providers to enhance detection quality and cut down on false positives

Operational Governance & Compliance

• Translate cybersecurity policies into practice by embedding requirements into IT workflows
• Maintain compliance with applicable regulations and frameworks (e.g. NIS2, CRA, ISO/IEC 27001)
• Keep security procedures and documentation clear, usable, and up to date

Coordination & Collaboration

• Serve as the operational link between IT teams (Infrastructure, Support, Applications) and governance functions
• Partner closely with Infrastructure (TST) and Support (SST) teams to define secure configuration baselines
• Liaise with external providers (SOC, MSSP, penetration testers)

People & Resource Management

• Manage Cyber Security Analysts, including onboarding, task prioritization, coaching, and performance follow-up
• Supervise internal and external security resources based at headquarters or remote sites
• Support security awareness initiatives and technical training for IT staff

Reporting & Continuous Improvement

• Maintain dashboards, KPIs, and indicators tracking operational security performance
• Spot opportunities for improvement and quick wins
• Help shape the cybersecurity roadmap from an execution-focused perspective

Profile

Experience & Background

• Proven hands-on experience in cybersecurity — SOC, SecOps, or Blue Team roles
• Demonstrated ability to work autonomously, take ownership, and drive initiatives forward
• Experience navigating complex IT environments (infrastructure, networks, cloud, endpoints)
• Initial exposure to leading or coordinating teams and activities (formal or informal leadership)

Skills & Mindset

• Strong hands-on, execution-oriented mindset
• Solid grasp of incident response, threat detection, and vulnerability management
• Ability to translate security requirements into pragmatic IT practices
• Comfortable managing multiple stakeholders and external providers
• Clear, structured, and pragmatic