Head of Security Operations, Corporate IT

This is a fully remote position, open to applicants in Netherlands.

📋 Description

• Oversee and enhance the Security Operations strategy and operational model, ensuring effective monitoring, triage, incident response, and ongoing improvement.

• Continue to develop a reliable security incident response capability with defined escalation procedures, playbooks/runbooks, operational readiness practices, and robust post-incident analysis.

• Advance threat intelligence and security validation methodologies (e.g., threat-informed exercises / adversarial testing techniques) to bolster detection capabilities and organizational resilience.

• Implement key, secrets, and certificate lifecycle management (ownership, lifecycle processes, monitoring, auditability), facilitating predictable and controlled operations.

• Guide and refine Corporate IT strategy and operational framework, transforming Corporate IT into a trusted, service-oriented entity with measurable performance and an outstanding internal stakeholder experience.

• Promote operational transparency through dashboards and KPIs within Security Operations and Corporate IT, proactively identifying, documenting, and escalating risks/issues along with practical mitigation strategies.

• Manage vendor performance and budget oversight across managed service providers and tooling partners, ensuring value, accountability, and scalable results.

• Enhance audit readiness and operational controls (e.g., for ISO/IEC 27001, PCI DSS, and similar assurance standards) through meticulous documentation, evidence collection, and follow-through on remediation.

• Actively engage with external stakeholders and remain informed about the latest trends.

⛳️ Requirements

• Over 10 years of professional experience in Cybersecurity within relevant fields, including a minimum of 5 years in leadership roles managing Security Operations.

• Extensive professional experience in Security Operations and/or Corporate IT Operations, preferably within regulated or high-availability environments.

• Proven leadership experience overseeing multidisciplinary teams, with a history of enhancing services through people, processes, and technology.

• Proficiency in English (CEFR C1 or C2); additional European languages are advantageous.

• Comfortable working remotely in a diverse, pan-European environment.

• Strong incident response leadership skills: calm under pressure, structured decision-making, and capable of driving measurable improvements over time.

• Experience in developing scalable operational practices: on-call/coverage models, escalation pathways, runbooks, post-incident reviews, and operational KPIs.

• Ability to create and implement pragmatic governance frameworks, including knowledge of enterprise cryptography/key management/certificates from an organizational standpoint.

• Demonstrated proficiency in improving Corporate IT service delivery (service orientation, intake models, transparency, stakeholder satisfaction).

• Experience in managing vendors/partners and budgets, including performance governance (SLAs, regular reviews, escalations, value realization).

• Familiarity with control assurance/audit activities (ISO 27001, DORA, PCI DSS, SOC 2 or similar), including evidence management and remediation oversight.

🏝️ Benefits

• Remote-first culture with quarterly and annual all-staff in-person meetups to foster connection and collaboration among teams.

• Opportunity to work from another EU country for up to 3 months each year.

• Competitive compensation package, including salary, performance-based bonuses, and a thoughtfully crafted, high-quality benefits program.

• Learning & development budget: €5,000 training budget annually.