Our client is one of the leading technology hubs in Bucharest, where tech pros across various disciplines (security, infrastructure, cloud or development) are delivering and owning services and processes for the group's subsidiaries.

The employer is a worldwide leading services and payments organization, supporting employee benefits administration, fleet&mobility solutions and Corporate payment services across 40+ countries. The Group brings together a unique network of 47 million employee users, 830.000 corporate clients and 1.7 million partner merchants.

In order to protect and further develop the business, the company is implementing a worldwide Security strategy meant to strenghten its portfolio of products and applications and to drive a culture of increased security awareness of ownership.

The Head of Security Operations reports to the Global Chief of Information Security and manages a team that is split between Romania and France. 

The key purpose of the job is to develop capabilities for incident response, managing incidents and alerts and working with Security COEs, IT and Business Units to deliver a strenghtened security posture for the global organization.

Your main responsibilities will revolve around the following:

• Manage the SOC and build the Computer Security Incident Response Team (CSIRT) based on the team's capabilities and business readiness for transformation.

• Lead the management of security incidents for the Group, ensuring that all required stakeholders are involved, that proper actions are allocated, taken and tracked, that remediation plans are documented, communicated and implemented. This includes post incident action plans;

• Report Security incidents in a timely manner, with calibrated reports and communication according to the targeted stakeholders (Line Management, C-Level, Data Privacy, Business Line, Business Units, Technology teams, etc);

• Improve collaboration between the SOC team members and Application owners, IT infrastructures & operations, Business owners, Global COEs and local CISOs to update and create detection use cases;

• Define together with Business stakeholders, Application owners and Project managers which data, assets and processes need to be protected and how, along with the alerts to be implemented;

• Lead and improve the company's DLP capabilities in accordance with local regulations, along with Security and business needs. This implies the identification and implementation of processes, controls, and tools to manage DLP incidents;

• Train SOC (external), COEs, BUs and all relevant teams to the management of Security incidents, based on policies, policies and provided “Playbooks”;

• Run Security incidents simulations to prepare stakeholders to real security incidents;

• Work closely with Infrastructure teams to monitor and improve the security on the company's Infrastructure;

• Interface with many sides of the business, stakeholders across multiple regions and disciplines.

This role is for you if you have:

• Solid experience managing Information Security Operations, Security Incidents or Data Breaches;

• Strong leadership and people skills;

• Any certifications on IT Service Management and/or Information Security (such as CISM, CISA, CISSP) are nice to have.

• Excellent communication skills, stakeholder management and teamwork across cultures;

• Experience working in large and complex international organizations where security is a critical capability;

• Fluent in English.

Why you should consider this role?

• You'll operate at a global scale, being part of a central security hub;

• You'll work in a very flexible hybrid model that allows you to use your energy and inspiration at your best - offices located at Eroii Revolutiei;

• Competitive salary | Meal vouchers | Holiday vouchers | Benefit budget | Medical subscription | Life insurance | Extra days off

• Budget for learning and certifications.

If you feel you still need to fill some gaps for this position don't give up, let's talk first.

If interested: send your resume to recruitment@itworx.roand we'll reach out to you shortly.

Else: you can refer an interested friend or acquaintance.