Head of Security Incident Management

Gea Group AG

Job

In dieser Position entwickelst du Sicherheitsvorfälle-Managementstrategien, leitest das SOC, überwachst Sicherheitsmaßnahmen und koordinierst Sicherheitsvorfälle über verschiedene IT-Umgebungen hinweg.

Job-Zusammenfassung

Job-Technologien

Deine Rolle im Team

  • As Head of Security Incident Management (f/m/d), you will be responsible for establishing, leading, and continuously improving GEA's Security Incident Management function.
  • In close alignment with the CISO, you will ensure that security incidents are managed effectively, efficiently, and in a transparent, audit-proof manner across the organization.
  • Own and drive all aspects of Security Incident Management within GEA.
  • Develop, implement, and continuously improve incident management policies, processes, and procedures.
  • Lead the Security Operations Center (SOC) and steer external SOC service providers.
  • Manage security incidents, compliance investigations, data leakage cases, and their reporting and follow-up activities.
  • Oversee threat intelligence, threat hunting, digital forensics activities, and offensive security initiatives.
  • Drive the technical implementation and enhancement of security monitoring and response capabilities, including ServiceNow, Microsoft Sentinel, automation, AI-driven capabilities, and detection engineering.
  • Coordinate complex IT, OT, production, and product-related security incidents and escalations through resolution.
  • Identify root causes, eliminate vulnerabilities, and advise stakeholders on risk mitigation and security improvements.
  • Collaborate closely with Information Security, IT, GEADigital, Compliance, Legal, HR, Production, Supply Chain, and other business stakeholders.
  • Define and execute short- and long-term Security Incident Management strategies, objectives, and governance frameworks.
  • Monitor and report SOC performance, KPIs, SLAs, risks, and service threats to the CISO and senior management.
  • Maintain relationships with external vendors, service providers, and regulatory authorities, including reporting security incidents when required.

Unsere Erwartungen an dich

Ausbildung

  • Master's degree in Information Security, Cybersecurity, Information Technology, Computer Science, Business Administration, or a related discipline.

Qualifikationen

  • Relevant security certifications such as CISM, ISMS Lead Implementor, ISMS Lead Auditor, ITIL, or COBIT are an advantage.
  • Strong expertise in cyber security technologies, threat landscapes, security standards, networking, and network security.
  • Sound knowledge of Linux and Windows infrastructures, network architectures, system hardening, forensic analysis, and incident response.
  • Strong understanding of ITIL processes; knowledge of scripting and PowerShell is beneficial.
  • Strong leadership, coaching, stakeholder management, and negotiation skills.
  • Excellent analytical and problem-solving capabilities with a strategic mindset.
  • Strong communication and collaboration skills; fluent English is required, additional languages are a plus.

Erfahrung

  • 5+ years of experience in Information Security and Cyber Security within IT and OT environments.
  • Several years of experience in IT Service Delivery, IT Operations, or IT Architecture.
  • Extensive experience with Microsoft security technologies, including Active Directory, Azure, Defender, Sentinel, and DLP.
  • Experience with SIEM/SOC environments, IDS/IPS technologies, firewalls, endpoint security, and security monitoring solutions.
  • Proven experience managing vendors and external service providers.
  • Experience with budget ownership and financial planning is advantageous.

Unser Angebot

  • Work in a supportive, appreciative, and international team.
  • A modern work environment with flexible work options to ensure a healthy work-life balance.
  • A wide range of personal and professional training and development opportunities to support your career.
  • Company pension scheme and accident insurance.
  • 30 vacation days per year plus December 24th & 31st off.
  • Employee benefits such as discounts on gym memberships, language courses, etc.
  • Subsidized job bike scheme.
  • Good public transport connections with travel allowance.
  • One additional day off for volunteering.
  • Global bonus program.

Benefits

Themen, mit denen du dich im Job beschäftigst

Job-Standorte

Karte der Job-Standorte
© OpenMapTiles, © OpenStreetMap contributors
  • Standort Düsseldorf
    Nordrhein-Westfalen, Deutschland

Das ist dein Arbeitgeber

GEA ist ein weltweit führender Technologiekonzern der spezialisiert ist auf die Herstellung von Anlagen, Maschinen und Komponenten für die Nahrungsmittelindustrie. Durch innovative Lösungen trägt das Unternehmen maßgeblich zur Optimierung der Lebensmittelproduktion bei.

Unternehmenstyp
Etablierte Firma
Arbeitsmodell
Onsite, Hybrid
Branche
Industrie, Produktion · Maschinenbau, Anlagenbau

Arbeitgeber-Reviews

2,6Gesamt(1 Bewertung)
Engineering
x
2,7
Karriere
x
2,3
Teamkultur
x
2,8
Arbeitsbedingungen
x
2,8
  • sinoDüsseldorf

    • Easy Apply
    • Onsite
    • Vollzeit
    • Senior

    Die sino AG, mit Sitz in der Düsseldorfer Innenstadt, ist seit über 25 Jahren ein innovativer Finanzdienstleister. Wir haben uns auf die Abwicklung von Wertpapiergeschäften für die aktivsten und anspruchsvollsten Trader in Deutschland spezialisiert. Mit...

    • Java
    • PHP
    • C#
    • SQL
    • Linux
    • Windows
  • Tröger & Cie. AktiengesellschaftNürnberg, Regensburg, Bayreuth

    • Easy Apply
    • Hybrid
    • Onsite
    • Vollzeit

    Wer hier einsteigt, gestaltet nicht nur Software – er bringt Maschinen zum Laufen, die man auf echten Baustellen wiedererkennt. Software-Entwickler (m/w/d) Basic Engineering Unser Auftraggeber ist ein international führender Hersteller von technisch...

    • Ethernet
    • C
    • Git
    • Python
    • Bash
    • Linux
    • C++
    • CAN
    • J1939
    • +4
    • +5
  • Öko-Institut Consult gGmbHFreiburg im Breisgau, Berlin

    • Easy Apply
    • Hybrid
    • Onsite
    • Teilzeit / Vollzeit

    Betrieb, Überwachung und Weiterentwicklung der Netzwerk-Infrastruktur. Administration und Konfiguration von Firewalls, Routern und Switches. Sicherstellung der Netzverfügbarkeit, -performance und -sicherheit. Mitwirkung bei IT‐Sicherheitskonzepten und...

    • TCP/IP
    • Active Directory
    • Windows
    • Microsoft Exchange
    • Office 365
    • Linux
    • VLAN
    • +4

Head of Security Incident Management

Gea Group AG