Head of Cyber Security

As the largest provider of health care products and services to office-based dental and medical practitioners, Henry Schein Inc. understands what it takes to be successful. Ranked first in its industry on the FORTUNE World's Most Admired Companies list, we set ourselves apart through our culture. Our culture is defined by our values, including mutual responsibility, ethical behaviour, creativity, and open communication. Approximately 25,000 Team Schein Members (TSMs) worldwide help us to maintain our culture and continue to thrive as a leader in our industry.

Exciting Job Opportunity: Defensive / Offensive Cybersecurity Lead

This position will be located near one of our offices in Madrid, Milan, or Paris.

This role will set a vision and define a compelling roadmap to build a fit-for-purpose defensive & offensive services portfolio, aimed at monitoring and responding to security events, and delivering measurable outcomes.

The lead will develop innovative solutions to advance the detection and remediation of cyber events, validate requirements with HIS stakeholders, develop metrics, and establish an effective, agile experimentation framework in partnership with the cyber security team to test the effectiveness of our tools and processes.

The role also involves overseeing financial aspects, supporting internal and external security audits, and reporting to the Chief Information Security Officer (CISO).

Key Responsibilities:

1. Set the strategic direction for incident response and all offensive and defensive practices.
2. Supervise and manage the Global Security Operations Center (SOC).
3. Oversee penetration testing and vulnerability management teams.
4. Plan hiring and training for defensive/offensive team members.
5. Create processes and playbooks for handling security events and incidents.
6. Assess and prioritize security events, coordinating with key groups.
7. Improve rules and procedures continuously.
8. Develop and integrate crisis management plans.
9. Create reports and dashboards to monitor service performance and effectiveness.
10. Design and execute tabletop exercises to test incident response plans.

Scope of the Role:

• Security event triaging and incident response using telemetry and threat intelligence.
• Threat hunting based on attack indicators.
• Vulnerability management across IT services.
• Risk-based penetration testing to assess security controls.
• Identify and implement best offensive/defensive security solutions with the architecture team.

Desired Qualifications:

• 10-15 years of offensive security experience.
• 10-15 years of defensive security experience, including managing Security Operation Centers, threat hunting, and threat intelligence.
• Knowledge of SIEM solutions like QRadar, Splunk, Microsoft Sentinel.
• Hands-on experience in incident response and cyber investigations.
• Experience working with large MSSPs and clients.
• Offensive Security and/or incident response certifications are required.
• Additional technical certifications are a plus.
• A Bachelor’s Degree is a plus.