Cyber Security Operations Manager

Scope

We are looking for a Cyber Security Operations Manager to join the IT Security team within the IT Corporate department, responsible for the operational execution and coordination of cybersecurity activities across the organization. This hands-on role acts as the primary link between IT operational teams (Infrastructure, Support, Applications) and governance/compliance (CISO Advisor), focusing on security operations, incident response, detection, vulnerability management, and remediation. The manager translates cybersecurity policies into concrete day-to-day processes, tools, and operational behaviors, working closely with all IT teams, though this is not a governance or policy-driven role, nor does it include direct administration of infrastructure components (firewalls, switches, servers), which remain with the Infrastructure & Digital Platforms teams.

The Cyber Security Operations Manager also has direct managerial responsibility over Cyber Security Analysts, overseeing their development, performance, and alignment with operational security objectives, while promoting a Shift Left approach that delegates low-complexity or repetitive tasks (e.g. basic alerts, endpoint maintenance, access requests) to first-level support where appropriate. As EVS is an NIS2 Essential Entity under Belgian law currently pursuing ISO/IEC 27001:2022 certification (target: April 2027), this role contributes directly to operational compliance, control implementation, and audit readiness.

Job Description

As part of the IT Security team, the Cyber Security Operations Manager will contribute to the following activities:

Security Operations & Incident Response

• Oversee day-to-day security operations, including SOC activities and threat monitoring
• Ensure effective detection, alert triage, escalation, and response to security incidents
• Coordinate incident response efforts across IT teams and external partners
• Take part in post-incident reviews and forensic analyses to strengthen organizational resilience

Vulnerability & Remediation Management

• Organize and support internal and external penetration testing engagements
• Track remediation plans and ensure proper follow-up through to closure
• Run and continuously refine vulnerability management processes and supporting tools

Security Tooling & Monitoring

• Deploy, operate, and fine-tune security solutions (e.g. SIEM, vulnerability scanners, EDR-related tooling)
• Ensure these solutions are properly calibrated, monitored, and aligned with operational needs
• Work with the SOC and service providers to enhance detection quality and cut down on false positives

Operational Governance & Compliance

• Translate cybersecurity policies into practice by embedding requirements into IT workflows
• Maintain compliance with applicable regulations and frameworks (e.g. NIS2, CRA, ISO/IEC 27001)
• Keep security procedures and documentation clear, usable, and up to date

Coordination & Collaboration

• Serve as the operational link between IT teams (Infrastructure, Support, Applications) and governance functions
• Partner closely with Infrastructure (TST) and Support (SST) teams to define secure configuration baselines
• Liaise with external providers (SOC, MSSP, penetration testers)

People & Resource Management

• Manage Cyber Security Analysts, including onboarding, task prioritization, coaching, and performance follow-up
• Supervise internal and external security resources based at headquarters or remote sites
• Support security awareness initiatives and technical training for IT staff

Reporting & Continuous Improvement

• Maintain dashboards, KPIs, and indicators tracking operational security performance
• Spot opportunities for improvement and quick wins
• Help shape the cybersecurity roadmap from an execution-focused perspective

Profile

Experience & Background

• Proven hands-on experience in cybersecurity — SOC, SecOps, or Blue Team roles
• Demonstrated ability to work autonomously, take ownership, and drive initiatives forward
• Experience navigating complex IT environments (infrastructure, networks, cloud, endpoints)
• Initial exposure to leading or coordinating teams and activities (formal or informal leadership)

Skills & Mindset

• Strong hands-on, execution-oriented mindset
• Solid grasp of incident response, threat detection, and vulnerability management
• Ability to translate security requirements into pragmatic IT practices
• Comfortable managing multiple stakeholders and external providers
• Clear, structured, and pragmatic communication style
• Strong sense of initiative, accountability, and ownership

Required Hands-On Exposure

Candidates must demonstrate practical experience in the following areas:

• Monitoring and detection tooling, such as SIEM and/or EDR platforms, including alert analysis, investigation, and tuning
• Vulnerability management, including assessment, prioritization, remediation tracking, and follow-up with IT teams
• Regulatory and security frameworks (e.g. NIS2, ISO 27K), approached from an implementation standpoint rather than a purely theoretical one
• Working alongside a SOC or managed security service provider (MSSP), including incident handling, escalation, and service oversight

Offer

Becoming part of the EVS team means receiving a competitive salary aligned with your skills and market standards, along with a wide range of wellness and healthcare benefits.

Our flexible schedules and hybrid working policies help support work–life balance. EVS also provides opportunities for career growth, internal mobility, and a broad range of training programs. You will join a friendly, lively, and inclusive environment that values motivation and ambition.

Visit our website to learn more about why you should join EVS!