IT Security SecOps Lead

Job Title: IT Security SecOpsLead

Role summary:

Are you passionate about cybersecurity and technology? Do you want to make a meaningful impact by helping protect a critical financial market infrastructure and one of the key clearing houses within the global financial markets’ecosystem?

LCH SA is seeking an experienced IT Security SecOps Lead to join its IT Security team in Paris. The role is responsible for helping secure LCH SA’s IT infrastructure and business applications by overseeing protection and detection capabilities, coordinating cyber incident response, supporting vulnerability remediation, and ensuring that security operations are delivered effectively across internal teams and outsourced service providers.

The successful candidate will bring strong experience across key areas of the cybersecurity operating model, including vulnerability management, cyber incident management, identity and privileged access management, security monitoring, ITIL-based service management, and the production of meaningful reporting, dashboards, KPIs and SLAs.

The IT Security SecOps Lead will coordinate and monitor the day-to-day security operations performed by internal teams and IT outsourcers. The role reports to the Head of IT Security.

Key responsibilities and accountabilities:

Oversee cyber security monitoring activities across internal detection capabilities and outsourced security services.Coordinate cyber security incident response and recovery activities with technology teams, the Security Operations Centre and relevant service providers.Manage security operations service delivery, including production, monitoring and continuous improvement of SLAs, KPIs and operational dashboards.Oversee outsourced cyber security services, ensuring effective delivery, clear governance, timely escalation and appropriate challenge of service providers.Provide expert support and guidance to IT Security Officers responsible for security control execution, evidence gathering and control assessments.Support ITIL-based cyber security processes, including change management, incident management, problem management and operational risk reduction.Lead or contribute to cyber securityprojects in coordination with internal IT teams and IT outsourcers tostrengthenLCHSA’ssecurity posture.

• Prepare and present regular management reporting on SecOps activities, service performance,cyberrisks and remediation progress.

What you’ll be doing:

• Vulnerability Management:

• Monitor threat intelligence and coordinate urgent patching or mitigationactivities where required.

• Review infrastructure, application and platformvulnerability scan reports;track,challengeand follow upremediation planswithtechnology teams.

• Cyber security incident management:

• Monitorand assesscyber securityalerts andeventsgenerated byinternaltoolsand outsourcedsecurity monitoringservices.

• Provide expert support during incident response activities, including triage, containment, eradication, forensic coordination and recovery support.

• Cyber security projects: Lead or contribute to security initiativesand providecyber security expertiseto technology teams throughoutprojectdelivery.

• Cyber security controls: Performselectedsecurity controls, such asanti-malware coveragereviews and firewall rulerecertification,and provideexpertinputon controlsassessed byother IT SecurityOfficers.

• ITIL cyber security management: Review and challengetechnology and businesschanges,problem closures and operational decisions thatmay impact the cyber security profile of the CCP.

Veuillez lire attentivement les informations de cette offre d'emploi pour comprendre exactement ce qui est attendu des candidats potentiels.
You’ll bring:

• Education:

Bachelor’s degree inComputer Science, Engineering,Cybersecurityor a related field,or equivalentprofessionalexperience.

• Professional experience:

At least 10 years of experience as a Security Engineer, Security Operations specialist or similar role, preferably in a regulated, complex and highly available environment.

Cyber security certificationssuch as CISSP, GIAC or equivalent would be an advantage.

Fluent Englishismandatory,given the role’s regular interaction with teamsacross an international Group.

• Required technology expertise:

• Network Security

• Operating systems, databases, middleware and application security

• VMware Cloud Security

• Cloudtechnologyexpertise(SNC,AWS,Azure etc.)

• Secrets management

• Encryption

• Vulnerability Management

• EDR/AV

• IAM/PAM