Information Security Operations Lead

We are looking for an Information Security Operations Lead to own the company’s day-to-day security operations — from incident response and SOC performance to vulnerability management, access governance, and ISO 27001 readiness. The role reports to the CISO, sits within the Security & Risk Department, and is the main point of contact for operational security across IT and other business units.

Responsibilities

• Act as the single point of contact for IT, R&D, Manufacturing, and other departments on operational security matters, including reviews for new services, integrations, and vendor access
• Lead and coordinate the SOC analyst team: prioritization, quality control, mentoring, performance management
• Own incident response end-to-end: coordinating participants, timeline and communication, containment, remediation, and reporting with lessons learned for the CISO
• Maintain SOC playbooks, runbooks, and triage/response procedures; run regular case reviews and turn findings into process improvements
• Improve SIEM detections, reduce false positives, and drive automation
• Drive vulnerability remediation together with IT: prioritization, timelines, tracking, and overdue reporting
• Organize regular access reviews together with IT and system owners
• Own SOC-related ISMS controls under ISO 27001 (incident, vulnerability, and log management per Annex A); prepare audit evidence for internal and certification audits
• Maintain the security incident register per ISMS requirements and close related corrective actions within agreed timelines
• Contribute operational incident and threat data to risk assessment reviews
• Track and report security operations metrics (MTTD, MTTR, SLA, overdue vulnerabilities) to the CISO and leadership

Required Skills & Experience

• 5+ years of experience in SOC, Incident Response, or Security Operations
• Experience leading a SOC team or acting as a technical lead
• Hands-on experience with SIEM, EDR/XDR, and incident management
• Experience coordinating vulnerability management and access reviews with IT
• Hands-on experience with ISO 27001 or a similar security framework
• Strong stakeholder management and communication skills, including with non-technical audiences

Nice to Have

• Cloud security experience (AWS, Azure, GCP)
• SOAR, automation, or scripting experience
• Experience supporting ISO 27001 certification audits
• Certifications: CISSP, GCIH, GCIA, SC-200, Splunk, or similar

The company offers:

• Official employment with a competitive salary and clear, transparent terms of cooperation.
• Paid vacation (24 calendar days per year) and paid sick leave.
• Support for your professional growth — the company is actively expanding, and you’ll have the opportunity to grow together with it.
• An atmosphere of trust, open communication, and leadership — initiative is welcomed, ideas are brought to life, and the team supports your progress.