Senior Cybersecurity Operations & Response Specialist - Planon

At Planon, part of Schneider Electric, this role helps shape, govern and continuously improve our cybersecurity monitoring and incident response capabilities. You will work at the intersection of strategy, governance and operations, ensuring that our monitoring, detection and response processes remain effective, measurable and aligned with business, security and regulatory requirements.

Working across Cloud, Product, R&D and Global IT teams, you will define monitoring strategies, drive stakeholder alignment, oversee response performance and help coordinate actions during security incidents. While operational teams remain responsible for day-to-day execution, you play a key role in setting direction, removing obstacles, escalating risks and ensuring critical issues receive the attention they require.

What we can challenge you with:

• Shape the monitoring strategy: Define and continuously improve our monitoring, detection and response approach in collaboration with key business and technology stakeholders.
• Improve incident response: Strengthen incident response processes, escalation paths and response targets while coordinating significant security incidents and supporting communication and reporting obligations towards the Dutch NCSC (NIS2) and other relevant authorities where required.
• Drive operational oversight: Monitor incident handling, remediation activities and security service performance, ensuring risks and delays receive appropriate attention.
• Support security operations: Guide teams on monitoring and response activities, help remove blockers and assist when critical security issues require additional coordination.
• Deliver management insight: Provide clear reporting on monitoring coverage, incident trends, response performance and key security risks.
• Lead continuous improvement: Identify opportunities to improve monitoring capabilities, response effectiveness, tooling and operational processes.
• Support assurance activities: Help maintain audit evidence, support customer assurance activities and demonstrate compliance with security and regulatory requirements.

Note: This role combines governance leadership with practical coordination and requires reasonable flexibility to support exceptional security incidents outside normal working hours when needed.

You combine cybersecurity depth with a structured and collaborative way of working. You communicate clearly with technical and non-technical stakeholders, create focus when the path is still developing and follow through on priorities without taking over operational ownership.

This role is a great fit if you:

• Have proven of minimum 6 experience in cybersecurity monitoring, incident response, SOC operations, threat detection or security operations governance.
• Can develop monitoring strategies, governance frameworks, operating models and improvement roadmaps.
• Understand logging, SIEM platforms, detection engineering, alert management, incident classification, escalation processes and remediation workflows.
• Have experience coordinating stakeholders during incidents and driving actions across multiple technical teams.
• Can translate technical findings into clear and actionable management reporting.
• Are comfortable challenging overdue actions, managing risk discussions and escalating issues when necessary.
• Have working knowledge of security, privacy and regulatory requirements relevant to European SaaS organizations.
• Communicate effectively with both technical and non-technical stakeholders and are professionally fluent in English.

Good to have

• A bachelor’s or master’s degree in cybersecurity, information security, computer science, information systems or a related field, or equivalent relevant experience.
• A relevant certification such as CISSP, CISM, GCIH, CompTIA CySA+ or Microsoft Certified: Security Operations Analyst Associate.
• Experience with NIS2, the Cyber Resilience Act, BSI C5, SOC operations governance, SIEM capability development, security metrics, audit evidence management or customer assurance activities.
• Dutch language skills are an advantage.