Cyber Security Operations Manager

The Cyber Security Operations Manager is responsible for the operational execution and coordination of cybersecurity activities across the Corporate IT organization.
This is a hands-on, operational role, acting as the primary interface between IT operational teams (Infrastructure, Support, Applications) and governance/compliance roles (CISO Advisor). The role focuses on security operations, incident response, detection, vulnerability management, and remediation, ensuring that cybersecurity controls are effectively implemented, monitored, and continuously improved.
The Cyber Security Operations Manager translates cybersecurity policies and standards into concrete, day-to-day IT processes, tools, and operational behaviors, working closely with all IT teams. 
This role is not pure governance or policy-driven function and does not include direct administration of infrastructure components (firewalls, switches, servers), which remain under the responsibility of Infrastructure & Digital Platforms teams.

The Cyber Security Operations Manager has direct managerial responsibility over Cyber Security Analysts and ensures their development, performance, and alignment with operational security objectives.
He actively promotes a Shift Left approach, enabling the delegation of low-complexity or repetitive security activities (e.g. basic alerts, endpoint maintenance, access-related tasks) to first-level support teams where appropriate.

Security Operations & Incident Response

• Coordinate and oversee day-to-day security operations, including SOC activities and security monitoring.
• Ensure effective detection, alert handling, escalation, and response to security incidents.
• Coordinate incident response activities across IT teams and external partners.
• Participate in post-incident reviews and forensic analyses to strengthen resilience.

Vulnerability & Remediation Management

• Organize and support internal and external penetration testing activities.
• Track vulnerability remediation plans and ensure proper follow-up and closure.
• Operate and continuously improve vulnerability management processes and tooling.

Security Tooling & Monitoring

• Deploy, operate, and optimize security tools (e.g. SIEM, vulnerability scanners, EDR-related tooling);
• Ensure tools are effectively tuned, monitored, and aligned with operational needs.
• Collaborate with SOC and service providers to improve detection quality and reduce noise.

Operational Governance & Compliance

• Operationalize cybersecurity policies by embedding security requirements into IT workflows and daily operations.
• Ensure operational compliance with applicable regulations and frameworks (e.g. NIS2, CRA, ISO/IEC 27001);
• Maintain clear, usable, and operational security procedures and documentation.

Coordination & Collaboration

• Act as the operational bridge between IT teams (Infrastructure, Support, Applications) and governance roles.
• Collaborate closely with Infrastructure (TST) and Support (SST) teams to define secure configuration baselines.
• Coordinate with external service providers (SOC, MSSP, penetration testers).

People & Resource Management

• Manage Cyber Security Analysts, including onboarding, task prioritization, coaching, and performance follow-up.
• Oversee internal and external security resources operating from headquarters or remote sites.
• Contribute to security awareness initiatives and technical training for IT teams.

Reporting & Continuous Improvement

• Maintain operational security dashboards, KPIs, and indicators.
• Identify operational security improvements and quick wins.
• Contribute to the evolution of the cybersecurity roadmap from an execution-focused perspective.

Experience & Background

• Proven operational experience in cybersecurity, such as security operations, SOC, SecOps, or Blue Team roles.
• Demonstrated ability to operate autonomously, take ownership of security operations, and lead operational initiatives.
• Experience working in complex IT environments (infrastructure, networks, cloud, endpoints).
• First experience coordinating people, activities, or security operations (formal or informal leadership).

Skills & Mindset

• Strong hands-on and execution-oriented mindset.
• Solid understanding of incident response, threat detection, and vulnerability management.
• Ability to translate security requirements into pragmatic IT practices.
• Comfortable coordinating multiple stakeholders and external providers.
• Clear, structured, and pragmatic communication style.
• Sense of initiative, accountability, and ownership.

Required Operational Exposure

Candidates must demonstrate practical, hands-on exposure to the following areas as part of their operational security experience:

• Security monitoring and detection tooling, such as SIEM and/or EDR platforms, including alert analysis, investigation, and tuning.
• Vulnerability management activities include vulnerability assessment, prioritization, remediation tracking, and coordination with IT teams.
• Operational security frameworks and regulatory requirements (e.g. NIS2, ISO 27K) from an implementation and execution perspective, rather than purely theoretical or policy driven.
• Collaboration with a SOC or managed security service providers (MSSP), including incident handling, escalation, and service coordination.

The expected level is operational and pragmatic: candidates are not required to be experts in every tool or framework, but must have sufficient experience to operate autonomously, challenge providers, and drive execution

Becoming Part of the EVS Team not only means that you will receive a competitive salary in line with your skills and the market, but also a range of other additional wellness and healthcare benefits. Our flexible schedules and hybrid way of working (homeworking) policies will help you preserve your work-life balance. EVS will give you the tools to develop your skills and your career by giving you the opportunities of internal mobilities and a wide range of trainings. We encourage our motivated talents with a friendly, lively, and inclusive environment.

Check out our website if you want to know more about why you should join EVS