Operational Security Manager

What do you need to succeed in this opportunity

• Significant experience leading cybersecurity incident response or security operations, with demonstrated knowledge of the full incident response lifecycle.
• Experience investigating incidents across product, application, cloud, infrastructure, network, endpoint, and third-party environments.
• Working knowledge of EU cybersecurity regulatory requirements, particularly the incident and actively exploited vulnerability notification requirements of the EU Cyber Resilience Act.
• Strong understanding of threat and vulnerability analysis, digital forensics, evidence preservation, chain of custody, and technologies such as SIEM, endpoint security, threat intelligence, and vulnerability management platforms.
• Ability to translate complex technical findings into clear incident assessments, escalation decisions, executive communications, and regulatory notifications.
• Strong leadership, stakeholder management, communication, and decision-making skills, with the ability to manage high-pressure incidents and meet operational and regulatory deadlines.

Required education

• University education (Master's degree)
• Postgraduate (Doctorate)

What will you do

• Support the full cybersecurity incident response lifecycle, including triage, investigation, containment, escalation, remediation, recovery, and post-incident review across enterprise and product environments.
• Coordinate incident response activities across Cybersecurity, Product Security, Engineering, IT, Legal, Compliance, Privacy, and external partners, including support for critical incidents outside normal business hours when necessary.
• Assess incidents and actively exploited vulnerabilities affecting products marketed or sold in the EU to determine applicable handling and notification requirements, particularly under the EU Cyber Resilience Act.
• Coordinate timely and accurate regulatory notifications, ensuring required incident, product, impact, mitigation, and remediation information is gathered, validated, documented, and communicated.
• Maintain incident records, regulatory assessments, reporting decisions, evidence, and chain of custody in support of internal, legal, audit, and regulatory requirements.
• Strengthen incident response readiness through playbooks, tabletop exercises, lessons learned, metrics, automation, and improvements to monitoring and investigation capabilities.

Contract type

Full-time

What we offer