At Planon, part of Schneider Electric, this role helps shape, govern and continuously improve our cybersecurity monitoring and incident response capabilities. You will work at the intersection of strategy, governance and operations, ensuring that our monitoring, detection and response processes remain effective, measurable and aligned with business, security and regulatory requirements.
Working across Cloud, Product, R&D and Global IT teams, you will define monitoring strategies, drive stakeholder alignment, oversee response performance and help coordinate actions during security incidents. While operational teams remain responsible for day-to-day execution, you play a key role in setting direction, removing obstacles, escalating risks and ensuring critical issues receive the attention they require.
What we can challenge you with
- Shape the monitoring strategy: Define and continuously improve our monitoring, detection and response approach in collaboration with key business and technology stakeholders.
- Improve incident response: Strengthen incident response processes, escalation paths and response targets while coordinating significant security incidents and supporting communication and reporting obligations towards the Dutch NCSC (NIS2) and other relevant authorities where required.
- Drive operational oversight: Monitor incident handling, remediation activities and security service performance, ensuring risks and delays receive appropriate attention.
- Support security operations: Guide teams on monitoring and response activities, help remove blockers and assist when critical security issues require additional coordination.
- Deliver management insight: Provide clear reporting on monitoring coverage, incident trends, response performance and key security risks.
- Lead continuous improvement: Identify opportunities to improve monitoring capabilities, response effectiveness, tooling and operational processes.
- Support assurance activities: Help maintain audit evidence, support customer assurance activities and demonstrate compliance with security and regulatory requirements.
Note: This role combines governance leadership with practical coordination and requires reasonable flexibility to support exceptional security incidents outside normal working hours when needed.