Senior Cybersecurity Operations & Response Lead

Planon; Nijmegen; Hybrid; EUR 59,000 - 67,000; Full time

Benefits offered by this job

Hybrid work model

Continuous development opportunities

Learning-oriented environment

Job summary

Planon is seeking a cybersecurity monitoring and incident response governance leader to shape and continuously improve our security operations. You will collaborate across Cloud, Product, R&D and Global IT to define monitoring strategies, oversee response performance and coordinate remediation during incidents.

You will translate technical findings into clear management reporting, drive improvements, ensure regulatory alignment (NIS2) and support assurance activities while working in a

Qualifications

• Bachelor’s or master’s degree in cybersecurity, information security, computer science, information systems or related field.
• Experience with NIS2, Cyber Resilience Act, BSI C5, SOC operations governance, SIEM capability development, security metrics, audit evidence, or customer assurance activities.
• Professional fluency in English; Dutch language skills are an advantage.

Responsibilities

• Shape the monitoring strategy: define and continuously improve monitoring, detection and response with stakeholders.
• Improve incident response: strengthen processes, escalation paths and targets during significant incidents.
• Drive operational oversight: monitor handling, remediation and service performance; address risks and delays.
• Support security operations: guide teams on monitoring and response; remove blockers during critical issues.
• Deliver management insight: provide reporting on monitoring coverage, incident trends and risks.
• Lead continuous improvement: identify opportunities to enhance monitoring capabilities and processes.
• Support assurance activities: maintain audit evidence and demonstrate regulatory compliance.

Skills

Cybersecurity monitoring

Incident response

SOC operations

Threat detection

Security governance

Stakeholder management

Education

Bachelor's/Master's degree relevant field

Tools

SIEM platforms

Logging

Detection engineering

Alert management

Incident classification

Job description

At Planon, part of Schneider Electric, this role helps shape, govern and continuously improve our cybersecurity monitoring and incident response capabilities. You will work at the intersection of strategy, governance and operations, ensuring that our monitoring, detection and response processes remain effective, measurable and aligned with business, security and regulatory requirements.

Working across Cloud, Product, R&D and Global IT teams, you will define monitoring strategies, drive stakeholder alignment, oversee response performance and help coordinate actions during security incidents. While operational teams remain responsible for day-to-day execution, you play a key role in setting direction, removing obstacles, escalating risks and ensuring critical issues receive the attention they require.

What we can challenge you with:

• Shape the monitoring strategy: Define and continuously improve our monitoring, detection and response approach in collaboration with key business and technology stakeholders.
• Improve incident response: Strengthen incident response processes, escalation paths and response targets while coordinating significant security incidents and supporting communication and reporting obligations towards the Dutch NCSC (NIS2) and other relevant authorities where required.
• Drive operational oversight: Monitor incident handling, remediation activities and security service performance, ensuring risks and delays receive appropriate attention.
• Support security operations: Guide teams on monitoring and response activities, help remove blockers and assist when critical security issues require additional coordination.
• Deliver management insight: Provide clear reporting on monitoring coverage, incident trends, response performance and key security risks.
• Lead continuous improvement: Identify opportunities to improve monitoring capabilities, response effectiveness, tooling and operational processes.
• Support assurance activities: Help maintain audit evidence, support customer assurance activities and demonstrate compliance with security and regulatory requirements.

Note: This role combines governance leadership with practical coordination and requires reasonable flexibility to support exceptional security incidents outside normal working hours when needed.

Profile

You combine cybersecurity depth with a structured and collaborative way of working. You communicate clearly with technical and non-technical stakeholders, create focus when the path is still developing and follow through on priorities without taking over operational ownership.

This role is a great fit if you:

• Have proven of minimum 6 experience in cybersecurity monitoring, incident response, SOC operations, threat detection or security operations governance.
• Can develop monitoring strategies, governance frameworks, operating models and improvement roadmaps.
• Understand logging, SIEM platforms, detection engineering, alert management, incident classification, escalation processes and remediation workflows.
• Have experience coordinating stakeholders during incidents and driving actions across multiple technical teams.
• Can translate technical findings into clear and actionable management reporting.
• Are comfortable challenging overdue actions, managing risk discussions and escalating issues when necessary.
• Have working knowledge of security, privacy and regulatory requirements relevant to European SaaS organizations.
• Communicate effectively with both technical and non-technical stakeholders and are professionally fluent in English.

Good to have

• A bachelor’s or master’s degree in cybersecurity, information security, computer science, information systems or a related field, or equivalent relevant experience.
• A relevant certification such as CISSP, CISM, GCIH, CompTIA CySA+ or Microsoft Certified: Security Operations Analyst Associate.
• Experience with NIS2, the Cyber Resilience Act, BSI C5, SOC operations governance, SIEM capability development, security metrics, audit evidence management or customer assurance activities.
• Dutch language skills are an advantage.

We offer

• We offer a healthy work-life balance with the flexibility of hybrid working, in a collaborative and learning-oriented environment with opportunities for continuous development.
• We put our people at the heart of our company and create an inspiring and safe environment that allows everyone to work, learn, live and play.
• You will work on challenging topics across the organisation and help strengthen Planon’s security resilience.

Salary range: EUR 5,300 - EUR 6,000 gross per month, depending on experience. This range reflects a good faith estimate of the expected compensation for this role, based on objective, role-related criteria. The total compensation package includes variable compensation and additional benefits.

Planon is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by applicable law.

Excited to build security resilience and drive impact? Join us and help shape how Planon monitors and responds to cybersecurity risk.

We may use artificial intelligence (AI) or automated tools to support parts of our recruitment process, such as application screening and candidate assessment. These tools assist our recruiters, and final employment decisions are always made by human professionals.