IT Security Analyst EMEA Retail (H/F)

EssilorLuxottica; Créteil; Sur place; EUR 70 000 - 110 000; Plein temps

Résumé du poste

EssilorLuxottica is seeking an IT Security Specialist to safeguard the EMEA retail IT landscape, with a focus on GRC and SOC operations. The role spans governance, risk, and security monitoring across BeNe Optical retail and EMEA retail environments.

You'll work within the Global Security Operations Center Level 2 team, emphasizing security monitoring, incident detection, investigation, and response using SIEM/XDR technologies. BeNe Optical governance days applied.

Qualifications

• Experience in Security Operations (SOC), preferably Level 2.
• Expertise with XDR platforms such as Microsoft Defender and Palo Alto Cortex.
• Experience with security incident detection, investigation and response across endpoints, identities, networks and cloud.
• Solid understanding of common attack techniques, threat vectors and incident response methodologies.

Responsabilités

• Governance, Risk & Compliance (GRC) activities for BeNe Optical Retail, reporting to stakeholders.
• Operate within the Global SOC Level 2 team to monitor, triage, investigate and respond to security alerts.
• Support deployment and troubleshooting of XDR solutions across endpoints, identities, networks and cloud workloads.

Connaissances

SOC Level 2

XDR platforms

Microsoft Defender

Palo Alto Cortex

Incident response

Threat detection

GRC processes

English fluency

International environments

Outils

Microsoft Defender

Cortex XDR

Palo Alto Cortex

Description du poste

If you’ve worn a pair of glasses, we’ve already met.

We are a global leader in the design, manufacture, and distribution of ophthalmic lenses, frames, and sunglasses. We offer our industry stakeholders in over150 countries access to a global platform of high-quality vision care products (such as the Essilor brand, with Varilux, Crizal, Eyezen, Stellest and Transitions), iconic brands that consumers love (such as Ray-Ban, Oakley, Persol, Oliver Peoples, Vogue Eyewear and Costa), as well as a network that offers consumers high-quality vision care and best-in-class shopping experiences (such as Sunglass Hut, LensCrafters, Salmoiraghi & Viganò and the GrandVision network), and leading e-commerce platforms.

Join our global community of over190,000 dedicated employees around the world in driving the transformation of the eyewear and eyecare industry.

Discover more by following us on LinkedIn!

Your #FutureInSight with EssilorLuxottica

Are you willing to pioneer new frontiers, foster inclusivity and collaboration, embrace agility, ignite passion, and make a positive impact on the world? Join us in redefining the boundaries of what’s possible!

About the role :

The IT Security Specialist plays a key role in safeguarding the organization’s EMEA retail IT landscape. The position covers Governance, Risk & Compliance (GRC) activities within the BeNe Optical retail organization and Security Operations across the EMEA retail environment.

The role is embedded within the Global S ecurity Operations Center (SOC) Level 2 team 3 working days per week, with a strong focus on security monitoring, incident detection, investigation, and response, leveraging modern SIEM and XDR technologies. 2 working days per week, the role is reserved for BeNe Optical retail for GRC Governance and Local security oversight.

What you will do :

1. Governance, Risk & Compliance (GRC) and Operational Support. (BeNe Optical Retail Scope) :

• Register, monitor, and report on objectives and activities within IT Security processes in collaboration with Benelux business and IT stakeholders.
• Maintain, configure, and continuously improve the Information Security Management System (ISMS) within GRC tooling.
• Register, track, and report security incidents within GRC tooling.
• Provide advice to the Benelux Retail Information Security Officer on information security measures.
• Support vulnerability management with a primary focus on operational remediation coordination and prioritization.
• Act as an information security advisor for new IT solutions and major changes to the IT Benelux infrastructure.

2. Security Operations (EMEA Optical Retail Scope) :

• Operate as an embedded analyst within the Global SOC Level 2 team, supporting EMEA retail operations.
• Monitor, triage, investigate, and respond to security alerts and incidents, ensuring timely detection, containment, remediation, and escalation.
• Manage and investigate security alerts partially escalated by an external Level 1 (L1) SOC via a ticketing system, while handling other alerts directly within the XDR platform.
• Utilize and optimize XDR platforms, including Microsoft Defender and Palo Alto Cortex, to enhance threat detection and response.
• Correlate events across endpoints, identities, networks, and cloud environments to identify advanced and persistent threats.
• Support the deployment, onboarding, and troubleshooting of XDR solutions, including endpoints, identities, networks, and cloud workloads.

3. Reporting & Stakeholder Management :

• Provide regular and ad-hoc reporting to the Global IT Security Operations Manager and the Bene Optical Retail Information Security Officer.
• Act as a liaison between Global Security Operations and the Benelux retail organization, ensuring alignment between global operations and local governance requirements.
• Participate in IT security-related meetings and stakeholder consultations.

What sets you apart :

• Proven experience in Security Operations (SOC), preferably at Level 2.
• Demonstrated expertise in XDR solutions, such as Microsoft Defender and Palo Alto Cortex.
• Experience with security incident detection, investigation, and response across endpoint, identity, network, and cloud environments.
• Solid understanding of common attack techniques, threat vectors, and incident response methodologies.
• Experience working in international or distributed environments, preferably within retail or large enterprise organizations.
• Strong analytical skills and the ability to communicate technical findings clearly to both technical and non‑technical stakeholders.
• Experience in Governance, Risk & Compliance (GRC) processes, including audits, ISMS management, and policy implementation.
• Fluent in English, both written and spoken.

Preferred Qualifications :

• Knowledge of ISO 27001, NIST, or similar information security frameworks.
• Experience with vulnerability remediation coordination in enterprise environments.
• Dutch language proficiency (spoken and written) is preferred.
• Relevant certifications such as GCIH, GCED, SC-200, AZ-500, or Palo Alto certifications are a plus.

Our Diversity, Equity and Inclusion commitment

We are committed to creating an inclusive environment for all employees. We celebrate diversity and provide equal opportunities to all, regardless of race, gender, ethnicity, religion, disability, sexual orientation, or any other characteristic that makes us unique.