Information Security Operations Lead

We are looking for an Information Security Operations Lead to own the company’s day-to-day security operations — from incident response and SOC performance to vulnerability management, access governance, and ISO 27001 readiness. The role reports to the CISO, sits within the Security & Risk Department, and is the main point of contact for operational security across IT and other business units. Responsibilities Act as the single point of contact for IT, R&D, Manufacturing, and other departments on operational security matters, including reviews for new services, integrations, and vendor access Lead and coordinate the SOC analyst team: prioritization, quality control, mentoring, performance management Own incident response end-to-end: coordinating participants, timeline and communication, containment, remediation, and reporting with lessons learned for the CISO Maintain SOC playbooks, runbooks, and triage/response procedures; run regular case reviews and turn findings into process improvements Improve SIEM detections, reduce false positives, and drive automation Drive vulnerability remediation together with IT: prioritization, timelines, tracking, and overdue reporting Organize regular access reviews together with IT and system owners Own SOC-related ISMS controls under ISO 27001 (incident, vulnerability, and log management per Annex A); prepare audit evidence for internal and certification audits Maintain the security incident register per ISMS requirements and close related corrective actions within agreed timelines Contribute operational incident and threat data to risk assessment reviews Track and report security operations metrics (MTTD, MTTR, SLA, overdue vulnerabilities) to the CISO and leadership Required Skills & Experience 5+ years of experience in SOC, Incident Response, or Security Operations Experience leading a SOC team or acting as a technical lead Hands-on experience with SIEM, EDR/XDR, and incident management Experience coordinating vulnerability management and access reviews with IT Hands-on experience with ISO 27001 or a similar security framework Strong stakeholder management and communication skills, including with non-technical audiences Nice to Have Cloud security experience (AWS, Azure, GCP) SOAR, automation, or scripting experience Experience supporting ISO 27001 certification audits Certifications: CISSP, GCIH, GCIA, SC-200, Splunk, or similar The company offers: Official employment with a competitive salary and clear, transparent terms of cooperation. Paid vacation (24 calendar days per year) and paid sick leave. Support for your professional growth — the company is actively expanding, and you’ll have the opportunity to grow together with it. An atmosphere of trust, open communication, and leadership — initiative is welcomed, ideas are brought to life, and the team supports your progress.