Head of Security Incident Management (f/m/d)

Responsibilities / Tasks

As Head of Security Incident Management (f/m/d), you will be responsible for establishing, leading, and continuously improving GEA's Security Incident Management function. In close alignment with the CISO, you will ensure that security incidents are managed effectively, efficiently, and in a transparent, audit-proof manner across the organization.

• Own and drive all aspects of Security Incident Management within GEA
• Develop, implement, and continuously improve incident management policies, processes, and procedures
• Lead the Security Operations Center (SOC) and steer external SOC service providers
• Manage security incidents, compliance investigations, data leakage cases, and their reporting and follow-up activities
• Oversee threat intelligence, threat hunting, digital forensics activities, and offensive security initiatives
• Drive the technical implementation and enhancement of security monitoring and response capabilities, including ServiceNow, Microsoft Sentinel, automation, AI-driven capabilities, and detection engineering
• Coordinate complex IT, OT, production, and product-related security incidents and escalations through resolution
• Identify root causes, eliminate vulnerabilities, and advise stakeholders on risk mitigation and security improvements
• Collaborate closely with Information Security, IT, GEADigital, Compliance, Legal, HR, Production, Supply Chain, and other business stakeholders
• Define and execute short- and long-term Security Incident Management strategies, objectives, and governance frameworks
• Monitor and report SOC performance, KPIs, SLAs, risks, and service threats to the CISO and senior management
• Maintain relationships with external vendors, service providers, and regulatory authorities, including reporting security incidents when required

Your Profile / Qualifications

• Master's degree in Information Security, Cybersecurity, Information Technology, Computer Science, Business Administration, or a related discipline
• Relevant security certifications such as CISM, ISMS Lead Implementor, ISMS Lead Auditor, ITIL, or COBIT are an advantage
• 5+ years of experience in Information Security and Cyber Security within IT and OT environments
• Several years of experience in IT Service Delivery, IT Operations, or IT Architecture
• Strong expertise in cyber security technologies, threat landscapes, security standards, networking, and network security
• Extensive experience with Microsoft security technologies, including Active Directory, Azure, Defender, Sentinel, and DLP
• Experience with SIEM/SOC environments, IDS/IPS technologies, firewalls, endpoint security, and security monitoring solutions
• Sound knowledge of Linux and Windows infrastructures, network architectures, system hardening, forensic analysis, and incident response
• Strong understanding of ITIL processes; knowledge of scripting and PowerShell is beneficial
• Proven experience managing vendors and external service providers.
• Strong leadership, coaching, stakeholder management, and negotiation skills
• Excellent analytical and problem-solving capabilities with a strategic mindset
• Strong communication and collaboration skills; fluent English is required, additional languages are a plus
• Experience with budget ownership and financial planning is advantageous

What Makes You Successful

• You combine strategic leadership with hands-on expertise in Security Incident Management
• You can confidently influence decision-making across complex stakeholder environments
• You have a strong ability to build partnerships, drive change, and continuously improve security operations
• You thrive in cross-functional environments and are passionate about strengthening organizational cyber resilience

What we offer:

• Work in a supportive, appreciative, and international team
• A modern work environment with flexible work options to ensure a healthy work-life balance
• A wide range of personal and professional training and development opportunities to support your career
• Company pension scheme and accident insurance
• 30 vacation days per year plus December 24th & 31st off
• Employee benefits such as discounts on gym memberships, language courses, etc.
• Subsidized job bike scheme
• Good public transport connections with travel allowance
• One additional day off for volunteering
• Global bonus program

Did we spark your interest?
Then please click apply above to access our guided application process.