Head of Security Incident Management

Gea Group AG

Job

In this role, you will develop security incident management strategies, lead the SOC, monitor security measures, and coordinate security incidents across various IT environments.

Job summary

This listing has been machine translated. Show original

Job technologies

Your role in the team

  • As Head of Security Incident Management (f/m/d), you will be responsible for establishing, leading, and continuously improving GEA's Security Incident Management function.
  • In enger Abstimmung mit dem CISO stellst du sicher, dass Sicherheitsvorfälle im gesamten Unternehmen effektiv, effizient und transparent sowie revisionssicher bearbeitet werden.
  • Own and drive all aspects of Security Incident Management within GEA.
  • Develop, implement, and continuously improve incident management policies, processes, and procedures.
  • Lead the Security Operations Center (SOC) and manage external SOC service providers.
  • Manage security incidents, compliance investigations, data leakage cases, and their reporting and follow-up activities.
  • Oversee threat intelligence, threat hunting, digital forensics activities, and offensive security initiatives.
  • Drive the technical implementation and enhancement of security monitoring and response capabilities, including ServiceNow, Microsoft Sentinel, automation, AI-driven capabilities, and detection engineering.
  • Coordinate complex IT, OT, production, and product-related security incidents and escalations through resolution.
  • Identify root causes, eliminate vulnerabilities, and advise stakeholders on risk mitigation and security improvements.
  • Collaborate closely with Information Security, IT, GEADigital, Compliance, Legal, HR, Production, Supply Chain, and other business stakeholders.
  • Define and execute short- and long-term Security Incident Management strategies, objectives, and governance frameworks.
  • Monitor and report SOC performance, KPIs, SLAs, risks, and service threats to the CISO and senior management.
  • Maintain relationships with external vendors, service providers, and regulatory authorities, including reporting security incidents when required.

Our expectations of you

Education

  • Master's degree in Information Security, Cybersecurity, Information Technology, Computer Science, Business Administration, or a related discipline.

Qualifications

  • Relevant security certifications such as CISM, ISMS Lead Implementer, ISMS Lead Auditor, ITIL, or COBIT are an advantage.
  • Strong expertise in cybersecurity technologies, threat landscapes, security standards, networking, and network security.
  • Sound knowledge of Linux and Windows infrastructures, network architectures, system hardening, forensic analysis, and incident response.
  • Strong understanding of ITIL processes; knowledge of scripting and PowerShell is beneficial.
  • Strong leadership, coaching, stakeholder management, and negotiation skills.
  • Excellent analytical and problem-solving capabilities with a strategic mindset.
  • Strong communication and collaboration skills; fluent English is required, and additional languages are a plus.

Experience

  • 5+ years of experience in Information Security and Cyber Security within IT and OT environments.
  • Several years of experience in IT Service Delivery, IT Operations, or IT Architecture.
  • Extensive experience with Microsoft security technologies, including Active Directory, Azure, Defender, Sentinel, and DLP.
  • Experience with SIEM/SOC environments, IDS/IPS technologies, firewalls, endpoint security, and security monitoring solutions.
  • Proven experience managing vendors and external service providers.
  • Experience with budget ownership and financial planning is advantageous.

What we offer

  • Work in a supportive, appreciative, and international team.
  • A modern work environment with flexible work options to ensure a healthy work-life balance.
  • A wide range of personal and professional training and development opportunities to support your career.
  • Company pension scheme and accident insurance.
  • 30 vacation days per year plus December 24th & 31st off.
  • Employee benefits such as discounts on gym memberships, language courses, etc.
  • Subsidized job bike scheme.
  • Good public transport connections with a travel allowance.
  • One additional day off for volunteering.
  • Global bonus program.

Benefits

Topics you will work on

Job locations

Map of the job locations
© OpenMapTiles, © OpenStreetMap contributors
  • Location Dusseldorf
    Nordrhein-Westfalen, Germany

About your employer

GEA is a world-leading technology provider for the food processing industry as well as numerous other industries. The internationally operating company specializes in plants, machines and process technologies as well as components.

Company type
Established Company
Work model
Onsite, Hybrid
Industry
Industry, Production · Engineering Industry

Employer reviews

2.6Total(1 review)
Engineering
x
2.7
Career growth
x
2.3
Team culture
x
2.8
Working conditions
x
2.8
  • sinoDusseldorf

    • Easy Apply
    • Onsite
    • Full Time
    • Senior

    sino AG, based in downtown Düsseldorf, has been an innovative financial service provider for over 25 years. We specialize in the execution of securities transactions for the most active and demanding traders in Germany. With currently 26 employees, we...

    • Java
    • PHP
    • C#
    • SQL
    • Linux
    • Windows
  • Tröger & Cie. AktiengesellschaftNuremberg, Regensburg, Bayreuth

    • Easy Apply
    • Hybrid
    • Onsite
    • Full Time

    Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...

    • Ethernet
    • C
    • Git
    • Python
    • Bash
    • Linux
    • C++
    • CAN
    • J1939
    • +4
    • +5
  • Öko-Institut Consult gGmbHFreiburg im Breisgau, Berlin

    • Easy Apply
    • Hybrid
    • Onsite
    • Part Time/Full Time

    Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...

    • TCP/IP
    • Active Directory
    • Windows
    • Microsoft Exchange
    • Office 365
    • Linux
    • VLAN
    • +4

Head of Security Incident Management

Gea Group AG