Cyber Security Operations Manager

Scope We are looking for a Cyber Security Operations Manager to join the IT Security team within the IT Corporate department, responsible for the operational execution and coordination of cybersecurity activities across the organization. This hands-on role acts as the primary link between IT operational teams (Infrastructure, Support, Applications) and governance/compliance (CISO Advisor), focusing on security operations, incident response, detection, vulnerability management, and remediation. The manager translates cybersecurity policies into concrete day-to-day processes, tools, and operational behaviors, working closely with all IT teams, though this is not a governance or policy-driven role, nor does it include direct administration of infrastructure components (firewalls, switches, servers), which remain with the Infrastructure & Digital Platforms teams. The Cyber Security Operations Manager also has direct managerial responsibility over Cyber Security Analysts, overseeing their development, performance, and alignment with operational security objectives, while promoting a Shift Left approach that delegates low-complexity or repetitive tasks (e.g. basic alerts, endpoint maintenance, access requests) to first-level support where appropriate. As EVS is an NIS2 Essential Entity under Belgian law currently pursuing ISO/IEC 27001:2022 certification (target: April 2027), this role contributes directly to operational compliance, control implementation, and audit readiness. Job Description As part of the IT Security team, the Cyber Security Operations Manager will contribute to the following activities: Security Operations & Incident Response Oversee day-to-day security operations, including SOC activities and threat monitoring Ensure effective detection, alert triage, escalation, and response to security incidents Coordinate incident response efforts across IT teams and external partners Take part in post-incident reviews and forensic analyses to strengthen organizational resilience Vulnerability & Remediation Management Organize and support internal and external penetration testing engagements Track remediation plans and ensure proper follow-up through to closure Run and continuously refine vulnerability management processes and supporting tools Security Tooling & Monitoring Deploy, operate, and fine-tune security solutions (e.g. SIEM, vulnerability scanners, EDR-related tooling) Ensure these solutions are properly calibrated, monitored, and aligned with operational needs Work with the SOC and service providers to enhance detection quality and cut down on false positives Operational Governance & Compliance Translate cybersecurity policies into practice by embedding requirements into IT workflows Maintain compliance with applicable regulations and frameworks (e.g. NIS2, CRA, ISO/IEC 27001) Keep security procedures and documentation clear, usable, and up to date Coordination & Collaboration …