Cyber Security Operations Manager

Azienda : Evs Ltd Tipo Lavoro : Tempo pieno Italy

Descrizione Lavoro - Cyber Security Operations Manager

Scope

We are looking for a Cyber Security Operations Manager to join the IT Security team within the IT Corporate department, responsible for the operational execution and coordination of cybersecurity activities across the organization. This hands-on role acts as the primary link between IT operational teams (Infrastructure, Support, Applications) and governance/compliance (CISO Advisor), focusing on security operations, incident response, detection, vulnerability management, and remediation. The manager translates cybersecurity policies into concrete day-to-day processes, tools, and operational behaviors, working closely with all IT teams — though this is not a governance or policy-driven role, nor does it include direct administration of infrastructure components (firewalls, switches, servers), which remain with the Infrastructure & Digital Platforms teams.

The Cyber Security Operations Manager also has direct managerial responsibility over Cyber Security Analysts, overseeing their development, performance, and alignment with operational security objectives, while promoting a Shift Left approach that delegates low-complexity or repetitive tasks (e.g. basic alerts, endpoint maintenance, access requests) to first-level support where appropriate. As EVS is an NIS2 Essential Entity under Belgian law currently pursuing ISO/IEC 27001:2022 certification (target: April 2027), this role contributes directly to operational compliance, control implementation, and audit readiness.

Job Description

Security Operations & Incident Response

- Oversee day-to-day security operations, including SOC activities and threat monitoring
- Ensure effective detection, alert triage, escalation, and response to security incidents
- Coordinate incident response efforts across IT teams and external partners
- Take part in post-incident reviews and forensic analyses to strengthen organizational resilience

Vulnerability & Remediation Management





- Organize and support internal and external penetration testing engagements
- Track remediation plans and ensure proper follow-up through to closure
- Run and continuously refine vulnerability management processes and supporting tools

Security Tooling & Monitoring

- Deploy, operate, and fine-tune security solutions (e.g. SIEM, vulnerability scanners, EDR-related tooling)
- Ensure these solutions are properly calibrated, monitored, and aligned with operational needs
- Work with the SOC and service providers to enhance detection quality and cut down on false positives

Operational Governance & Compliance

- Translate cybersecurity policies into practice by embedding requirements into IT workflows
- Maintain compliance with applicable regulations and frameworks (e.g. NIS2, CRA, ISO/IEC 27001)
- Keep security procedures and documentation clear, usable, and up to date

Coordination & Collaboration

- Serve as the operational link between IT teams (Infrastructure, Support, Applications) and governance functions
- Partner closely with Infrastructure (TST) and Support (SST) teams to define secure configuration baselines
- Liaise with external providers (SOC, MSSP, penetration testers)

People & Resource Management

- Manage Cyber Security Analysts, including onboarding, task prioritization, coaching, and performance follow-up
- Supervise internal and external security resources based at headquarters or remote sites
- Support security awareness initiatives and technical training for IT staff

Reporting & Continuous Improvement

- Maintain dashboards, KPIs, and indicators tracking operational security performance
- Spot opportunities for improvement and quick wins




- Help shape the cybersecurity roadmap from an execution-focused perspective

Profile

Experience & Background

- Proven hands-on experience in cybersecurity — SOC, SecOps, or Blue Team roles
- Demonstrated ability to work autonomously, take ownership, and drive initiatives forward
- Experience navigating complex IT environments (infrastructure, networks, cloud, endpoints)
- Initial exposure to leading or coordinating teams and activities (formal or informal leadership)

Skills & Mindset

- Strong hands-on, execution-oriented mindset
- Solid grasp of incident response, threat detection, and vulnerability management
- Ability to translate security requirements into pragmatic IT practices
- Comfortable managing multiple stakeholders and external providers
- Clear, structured, and pragmatic communication style
- Strong sense of initiative, accountability, and ownership

Required Hands-On Exposure

Candidates must demonstrate practical experience in the following areas:

- Monitoring and detection tooling, such as SIEM and/or EDR platforms, including alert analysis, investigation, and tuning
- Vulnerability management, including assessment, prioritization, remediation tracking, and follow-up with IT teams
- Regulatory and security frameworks (e.g. NIS2, ISO 27K), approached from an implementation standpoint rather than a purely theoretical one
- Working alongside a SOC or managed security service provider (MSSP), including incident handling, escalation, and service oversight

Offer

Becoming part of the EVS team means receiving a competitive salary aligned with your skills and market standards, along with a wide range of wellness and healthcare benefits.

Our flexible schedules and hybrid working policies help support work-life balance. EVS also provides opportunities for career growth, internal mobility, and a broad range of training programs. You will join a friendly, lively, and inclusive environment that values motivation and ambition.

#J-18808-Ljbffr

📌 Cyber Security Operations Manager (Italia)
🏢 Evs
📍 Italia