Head of Cyber Operations Europe

McGregor Boyall; Göteborgs kommun; On-site; SEK 1,504,000 - 1,839,000; Full time

Job summary

Volvo Group is seeking a Head of CSOC Europe to lead its Cyber Security Operations Center across Europe. The role requires strategic leadership of a ~35-person cyber team and deep expertise in incident response, threat intelligence, and threat management.

You will drive security monitoring, detection, and response strategies, ensuring regulatory compliance and continuous capability improvement. You will shape CSOC strategy, oversee operations, and mentor a high-performing team across multiple

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• Minimum 7+ years of cybersecurity experience, with at least 4+ years in a SOC leadership role.
• Certifications such as CISSP, CISM, CISA, GIAC (GCIA, GCIH, GSEC) are preferred.
• Extensive experience in security operations, incident response, digital forensics, and threat intelligence.
• Strong knowledge of SIEM, EDR, IDS/IPS, SOAR and other security monitoring technologies.
• Familiarity with scripting and automation (Python, PowerShell) to optimize SOC workflows.

Responsibilities

• Serve as the primary escalation point for major security incidents, overseeing coordination, investigation, containment, and remediation efforts.
• Collaborate with internal stakeholders and external partners to ensure swift and effective response to cybersecurity threats.
• Guide post‑incident analysis and forensic investigations, ensuring lessons learned are integrated into future strategies.
• Maintain and enforce incident response procedures, ensuring adherence to regulatory and industry best practices.
• Stay ahead of evolving cyber threats, attack techniques, and emerging security trends.
• Leverage threat intelligence sources to enhance detection capabilities and proactively mitigate risks.

Skills

CSOC Leadership

Incident Response

Threat Intelligence

Security Monitoring

Regulatory Compliance

Education

Bachelor’s degree in Computer Science/Cybersecurity/IT

Tools

SIEM

EDR

IDS/IPS

SOAR

Job description

Head of CSOC Europe

To c€150,000 + Benefits + Bonus

Sweden, Gothenberg

Head of Cyber Operations, strategic leadership of a function of c35 cyber professionals in the following teams and Cyber Operations Management experience… with a practitioner background in Incident Response and Threat Management, Threat Intelligence and Emerging Threats as well as collaboration and compliance.

Imagine using your expertise to shape sustainable transport and infrastructure solutions for the future. If you seek to make a difference on a global scale, working with next‑gen technologies and the sharpest collaborative teams, then we could be a perfect match.

Our Cyber Defense Center (CDC) brings together the people, processes, and capabilities needed to protect our business and strengthen resilience in an increasingly digital world.

This is an opportunity to lead one of the CDC's core operational capabilities, working alongside experienced cybersecurity professionals dedicated to detecting, responding to, and mitigating cyber threats that could impact our global operations.

The Head of the Cybersecurity Operations Center (CSOC) is a strategic and technical leader responsible for overseeing the operations, direction, and continuous improvement of the organization’s global Cybersecurity Operations Center. This role is responsible for ensuring the organization’s cyber defense capabilities remain cutting‑edge, resilient, and responsive to emerging threats. The ideal candidate will bring deep expertise in cybersecurity, incident response, threat intelligence, and operational leadership.

What you will do

Strategic Leadership & CSOC Management

• Develop and execute the CSOC strategy, ensuring alignment with overall cybersecurity and business objectives.
• Oversee and manage CSOC operations, including incident response, threat intelligence, and proactive monitoring.
• Define and refine security monitoring, threat detection, and response strategies to address evolving cyber threats.
• Continuously assess and improve CSOC processes, tools, and methodologies to enhance efficiency and effectiveness.
• Lead, mentor, and develop a high‑performing CSOC team, ensuring continuous skills development and knowledge sharing.
• Establish key performance indicators (KPIs) and metrics to measure CSOC effectiveness and drive operational improvements.

Incident Response & Threat Management

• Serve as the primary escalation point for major security incidents, overseeing coordination, investigation, containment, and remediation efforts.
• Collaborate with internal stakeholders and external partners to ensure swift and effective response to cybersecurity threats.
• Guide post‑incident analysis and forensic investigations, ensuring lessons learned are integrated into future strategies.
• Maintain and enforce incident response procedures, ensuring adherence to regulatory and industry best practices.

Threat Intelligence & Emerging Threats

• Stay ahead of evolving cyber threats, attack techniques, and emerging security trends.
• Leverage threat intelligence sources to enhance detection capabilities and proactively mitigate risks.
• Work with industry groups, government agencies, and vendors to strengthen the Volvo Group’s cyber defense posture.
• Ensure alignment with frameworks such as MITRE ATT&CK, NIST, and the Cyber Kill Chain to improve threat detection and response.
• Partner with IT, cybersecurity architecture, and compliance teams to ensure CSOC capabilities align with enterprise cybersecurity needs.
• Ensure CSOC operations comply with industry regulations, standards, and best practices (e.g., ISO 27001, NIST, GDPR).
• Communicate cybersecurity risks and CSOC performance to executive leadership, providing insights and recommendations.
• Develop strong relationships with third‑party vendors, service providers, and law enforcement as needed.

Who are you?

Do you dream big? We do too, and we are excited to grow together. In this role, you will bring:

• Education & Experience
• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field (Master’s degree preferred).
• Experience: Minimum 7+ years of cybersecurity experience, with at least 4+ years in a SOC leadership role.
• Certifications: Preferred certifications include CISSP, CISM, CISA, GIAC (GCIA, GCIH, GSEC), or equivalent.
• Technical Expertise
• Extensive experience in security operations, incident response, digital forensics, and threat intelligence.
• Strong knowledge of SIEM, EDR, IDS/IPS, SOAR, and other security monitoring technologies.
• Deep understanding of cybersecurity frameworks, regulations, and best practices.
• Familiarity with scripting and automation (Python, PowerShell, etc.) to optimize SOC workflows.

Preferred Qualifications

• Strong leadership and team management skills, with the ability to motivate and develop a high‑performing SOC team.
• Excellent problem‑solving, analytical, and decision‑making capabilities.
• Ability to communicate complex cybersecurity issues to both technical and non‑technical stakeholders.
• Experience working in a global enterprise environment, managing security operations across multiple regions.
• A forward‑thinking mindset with the ability to anticipate and proactively address security challenges.