Operational Security Manager M/F

As an organizer of recruitment forums, Talents Handicap accompanies many companies & organizations in France in their recruitment of employees with disabilities. Currently participating in one of our forums, the company LECTRA is currently looking for profiles: Within the Cybersecurity & Compliance Department, the Operational Security Manager (OSM) carries the "run" dimension of cybersecurity: they guarantee the daily security of the internal IS (IT) and the Offer infrastructures. A newly created position with an international dimension, they orchestrate security incident detection and response, management through indicators, and the security assessment of tools and suppliers.

Objective: to guarantee a homogeneous, measurable, and resilient level of security across the group, while respecting local specificities.

Main Responsibilities

Security Incident Management and Response Manage the qualification, prioritization, and treatment of incidents affecting the internal IS (in coordination with the Lead SecOps IT) and the Offer infrastructures; manage the incident lifecycle through to the post-mortem and follow-up of action plans Maintain detection and response procedures (playbooks, runbooks) Prepare and lead cyber crisis management (exercises, coordination with the cyber team and external authorities and partners) SOC Supervision and Internal Detection Management Define the SOC strategy and manage its overall performance (SLA, detection quality, response time), relying on the Lead SecOps IT as an operational relay for the IT perimeter Evolve detection use cases and integrate Threat Intelligence Continuously evaluate detection coverage against threats Management by indicators and reporting Define and monitor operational security indicators (incidents, SOC alerts, detection and remediation times, coverage, security debt) Produce operational reporting for the Cybersecurity Manager and the COMEX summary, and feed the operational component of compliance Security Assessment of Tools and Suppliers Participate in security assessments of IT tools (acquisition and lifecycle) and evaluate the risk of critical suppliers and third parties Carry security requirements into purchasing and contracting processes and follow up on supplier remediation plans Cyber framework, transverse animation, and client support Define and disseminate a cyber framework and guidelines adapted to each perimeter (service desk, internal IT, Offer infrastructure), co-constructed with the CISO Act as support for client requests (security questionnaires, audits, incidents)

Profile

Master's degree (engineering school, master's in cybersecurity or equivalent) Minimum 5 years of experience in operational security, SOC, incident response, or secure infrastructures, including experience in transverse management Comfort in an international and transverse environment Certifications appreciated: CISSP, CISM, ISO, cloud certifications Fluent English

Technical Skills

Incident response and investigation (CSIRT / CERT logic) Security supervision: SOC, detection and Threat Intelligence, KPI, SLA Hybrid infrastructure security: cloud infrastructures, systems and networks, hardening and vulnerability management Management by indicators and reporting (operational, executive, regulatory)

Behavioral Skills

Transverse leadership: uniting and managing without a direct hierarchical link, and internationally Ability to popularize and disseminate a security culture to non-specialist teams Rigor, analytical mindset, autonomy