Senior Cybersecurity Operations & Response Lead

ppAt Planon, part of Schneider Electric, this role helps shape, govern and continuously improve our cybersecurity monitoring and incident response capabilities. You will work at the intersection of strategy, governance and operations, ensuring that our monitoring, detection and response processes remain effective, measurable and aligned with business, security and regulatory requirements. /p pWorking across Cloud, Product, RD and Global IT teams, you will define monitoring strategies, drive stakeholder alignment, oversee response performance and help coordinate actions during security incidents. While operational teams remain responsible for day-to-day execution, you play a key role in setting direction, removing obstacles, escalating risks and ensuring critical issues receive the attention they require. /p h3What we can challenge you with: /h3 ul liShape the monitoring strategy: Define and continuously improve our monitoring, detection and response approach in collaboration with key business and technology stakeholders. /li liImprove incident response: Strengthen incident response processes, escalation paths and response targets while coordinating significant security incidents and supporting communication and reporting obligations towards the Dutch NCSC (NIS2) and other relevant authorities where required. /li liDrive operational oversight: Monitor incident handling, remediation activities and security service performance, ensuring risks and delays receive appropriate attention. /li liSupport security operations: Guide teams on monitoring and response activities, help remove blockers and assist when critical security issues require additional coordination. /li liDeliver management insight: Provide clear reporting on monitoring coverage, incident trends, response performance and key security risks. /li liLead continuous improvement: Identify opportunities to improve monitoring capabilities, response effectiveness, tooling and operational processes. /li liSupport assurance activities: Help maintain audit evidence, support customer assurance activities and demonstrate compliance with security and regulatory requirements. /li /ul pbNote /b: This role combines governance leadership with practical coordination and requires reasonable flexibility to support exceptional security incidents outside normal working hours when needed. /p h3Profile /h3 pYou combine cybersecurity depth with a structured and collaborative way of working. You communicate clearly with technical and non-technical stakeholders, create focus when the path is still developing and follow through on priorities without taking over operational ownership. /p h3This role is a great fit if you: /h3 ul liHave proven of minimum 6 experience in cybersecurity monitoring, incident response, SOC operations, threat detection or security operations governance. /li liCan develop monitoring strategies, governance frameworks, operating models and improvement roadmaps. /li liUnderstand logging, SIEM platforms, detection engineering, alert management, incident classification, escalation processes and remediation workflows. /li liHave experience coordinating stakeholders during incidents and driving actions across multiple technical teams. /li liCan translate technical findings into clear and actionable management reporting. /li liAre comfortable challenging overdue actions, managing risk discussions and escalating issues when necessary. /li liHave working knowledge of security, privacy and regulatory requirements relevant to European SaaS organizations. /li liCommunicate effectively with both technical and non-technical stakeholders and are professionally fluent in English. /li /ul h3Good to have /h3 ul liA bachelor’s or master’s degree in cybersecurity, information security, computer science, information systems or a related field, or equivalent relevant experience. /li liA relevant certification such as CISSP, CISM, GCIH, CompTIA CySA+ or Microsoft Certified: Security Operations Analyst Associate. /li liExperience with NIS2, the Cyber Resilience Act, BSI C5, SOC operations governance, SIEM capability development, security metrics, audit evidence management or customer assurance activities. /li liDutch language skills are an advantage. /li /ul h3We offer /h3 ul liWe offer a healthy work-life balance with the flexibility of hybrid working, in a collaborative and learning-oriented environment with opportunities for continuous development. /li liWe put our people at the heart of our company and create an inspiring and safe environment that allows everyone to work, learn, live and play. /li liYou will work on challenging topics across the organisation and help strengthen Planon’s security resilience. /li /ul pSalary range: EUR 5,300 - EUR 6,000 gross per month, depending on experience. This range reflects a good faith estimate of the expected compensation for this role, based on objective, role-related criteria. The total compensation package includes variable compensation and additional benefits. /p pPlanon is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by applicable law. /p pExcited to build security resilience and drive impact? Join us and help shape how Planon monitors and responds to cybersecurity risk. /p pWe may use artificial intelligence (AI) or automated tools to support parts of our recruitment process, such as application screening and candidate assessment. These tools assist our recruiters, and final employment decisions are always made by human professionals. /p /p #J-18808-Ljbffr