Lead IT Security (Operation Center)

The Lead IT Security (Operation Center) is the responsible role for the secure operation of all IT Services and IT Processes within IT in the areas of endpoint security, application security, network security and cloud security.

In this role you will act as a controller and navigator of the IT security organization within dormakaba.

You will collaborate closely with the Chief Information Security Officer (CISO) and provide recommendations for security measures within IT and OT solutions, ensuring compliance with directives. Dormakaba aims to seamlessly integrate security design operations from IT into non-IT domains wherever feasible and meaningful.

Design, build, improve and manage the global Security Operations team for Global IT and dormakaba OT which is monitoring and protecting dormakaba from Cyber Security attacks.

You will ensure delivery of the outsourced components of Managed Security Service (provider delivering nine SOWs). You will oversee all activities related to security incident prevention and response. Additionally you will deliver regular reporting of security KPIs, incl. C-level reporting.

An experience that matters: Your skills

• 10 years in a leadership role in the scope of IT/Cyber security.
• University degree in the field of Cyber Security, Cryptography, Computer Science, IT or another related field.
• Knowledge of common information security management frameworks, such as International Standards Organization (ISO) 2700x, the IT Infrastructure Library (ITIL) and Control Objectives for Information and Related Technology (COBIT) Frameworks.
• Experience developing and maintaining policies, procedures, standards and guidelines.
• Proficient in Incident Management and Response.
• Experience in SIEM technology, threat management, SOC operations and security analysis.
• Knowledge of various operating system flavors including but not limited to Windows, Linux, Unix.
• Proficient in preparation of security reports, dashboards and documentation.
• Experience in performing service & vendor management.
• Knowledge of information security management frameworks, such as: CISSP/CISM, CEH, GCIH, GSEC.
• Excellent level of English as well as the ability to convey complex IT security concepts to both technical and non-technical stakeholders.

We are in a dynamic environment, with a constantly evolving IT and security organization. For future growth and development, knowledge and experience in the adjacent fields of Security Strategy, Governance, Consulting as well as global Identity & Access Management (IAM) would be beneficial.

A job that matters: Your tasks

• Lead and manage the global SOC Team.
• Development and implementation of the global IT security organization and its further development with clear communication structures.
• Defining and implementing IT security measures and corresponding OT security measures.
• Ensure continuous improvement of MS Sentinel based SIEM service (operations are outsourced, design driven by SOC).
• Providing guidance regarding the selection, design and implementation of measures under IT security aspects.
• Supporting the security incident management process, as well as taking the lead in treating critical IT security related incidents.
• Managing the external SOC Service (Vendor Management) as well as any outsourced security services.
• Control and drive regular activities like Threat Management, Forensics and Analytics to continuously improve security posture.
• Regular scanning for vulnarabilities, identification of remediation or mitigation actions as well as monitoring of implementation.
• Escalation and management of response to Major/Critical incidents and coordination of all teams involved, incl. interface to CISO.
• Provide management oversight of SOC operations through aggregated SOC KPIs and KRIs, incl. C-level reporting.

What you can trust in: Fulfilling Workplace

• Best opportunities in a globally operating company valuing diversity, inclusion, sustainability and mutual trust
• Opportunity for flexibility with a hybrid working model
• Attractive remuneration package
• 25 days paid annual leave
• Additional health insurance
• 200 BGN Food vouchers
• Public transportation card
• Multisport card
• Training and mentorship programs
• 24/7 access to over 15,000 LinkedIn Learning courses to assist in your professional development and to expand on your individual interests
• Discover your best attributes using CliftonStrengths to pave the way for success at dormakaba.