Cyber Security Operations Manager

pWe are looking for a Cyber Security Operations Manager to join the IT Security team within the IT Corporate department, responsible for the operational execution and coordination of cybersecurity activities across the organization. This hands-on role acts as the primary link between IT operational teams (Infrastructure, Support, Applications) and governance/compliance (CISO Advisor), focusing on security operations, incident response, detection, vulnerability management, and remediation. The manager translates cybersecurity policies into concrete day-to-day processes, tools, and operational behaviors, working closely with all IT teams, though this is not a governance or policy-driven role, nor does it include direct administration of infrastructure components (firewalls, switches, servers), which remain with the Infrastructure Digital Platforms teams. /p pThe Cyber Security Operations Manager also has direct managerial responsibility over Cyber Security Analysts, overseeing their development, performance, and alignment with operational security objectives, while promoting a Shift Left approach that delegates low-complexity or repetitive tasks (e.g. basic alerts, endpoint maintenance, access requests) to first-level support where appropriate. As EVS is an NIS2 Essential Entity under Belgian law currently pursuing ISO/IEC 27001:2022 certification (target: April 2027), this role contributes directly to operational compliance, control implementation, and audit readiness. /p h3Job Description /h3 pAs part of the IT Security team, the Cyber Security Operations Manager will contribute to the following activities : /p h3Security Operations Incident Response : /h3 ul liOversee day-to-day security operations, including SOC activities and threat monitoring /li liEnsure effective detection, alert triage, escalation, and response to security incidents /li liCoordinate incident response efforts across IT teams and external partners /li liTake part in post-incident reviews and forensic analyses to strengthen organizational resilience /li /ul h3Vulnerability Remediation Management : /h3 ul liOrganize and support internal and external penetration testing engagements /li liTrack remediation plans and ensure proper follow-up through to closure /li liRun and continuously refine vulnerability management processes and supporting tools /li /ul h3Security Tooling Monitoring : /h3 ul liDeploy, operate, and fine-tune security solutions (e.g. SIEM, vulnerability scanners, EDR-related tooling) /li liEnsure these solutions are properly calibrated, monitored, and aligned with operational needs /li liWork with the SOC and service providers to enhance detection quality and cut down on false positives /li /ul h3Operational Governance Compliance : /h3 ul liTranslate cybersecurity policies into practice by embedding requirements into IT workflows /li liMaintain compliance with applicable regulations and frameworks (e.g. NIS2, CRA, ISO/IEC 27001) /li liKeep security procedures and documentation clear, usable, and up to date /li liServe as the operational link between IT teams (Infrastructure, Support, Applications) and governance functions /li liPartner closely with Infrastructure (TST) and Support (SST) teams to define secure configuration baselines /li liLiaise with external providers (SOC, MSSP, penetration testers) /li /ul h3People Resource Management : /h3 ul liManage Cyber Security Analysts, including onboarding, task prioritization, coaching, and performance follow-up /li liSupervise internal and external security resources based at headquarters or remote sites /li liSupport security awareness initiatives and technical training for IT staff /li liMaintain dashboards, KPIs, and indicators tracking operational security performance /li liSpot opportunities for improvement and quick wins /li liHelp shape the cybersecurity roadmap from an execution-focused perspective /li /ul h3Profile /h3 h3Experience Background : /h3 ul liProven hands-on experience in cybersecurity
- SOC, SecOps, or Blue Team roles /li liDemonstrated ability to work autonomously, take ownership, and drive initiatives forward /li liExperience navigating complex IT environments (infrastructure, networks, cloud, endpoints) /li liInitial exposure to leading or coordinating teams and activities (formal or informal leadership) /li /ul h3Skills Mindset : /h3 ul liStrong hands-on, execution-oriented mindset /li liSolid grasp of incident response, threat detection, and vulnerability management /li liAbility to translate security requirements into pragmatic IT practices /li liComfortable managing multiple stakeholders and external providers /li liClear, structured, and pragmatic communication style /li liStrong sense of initiative, accountability, and ownership /li /ul h3Required Hands-On Exposure : /h3 pCandidates must demonstrate practical experience in the following areas: /p ul liMonitoring and detection tooling, such as SIEM and/or EDR platforms, including aler