IT Security SecOps Lead

Job Title: IT Security SecOps Lead

Role summary:

Are you passionate about cybersecurity and technology? Do you want to make a meaningful impact by helping protect a critical financial market infrastructure and one of the key clearing houses within the global financial markets’ ecosystem?

LCH SA is seeking an experienced IT Security SecOps Lead to join its IT Security team in Paris. The role is responsible for helping secure LCH SA’s IT infrastructure and business applications by overseeing protection and detection capabilities, coordinating cyber incident response, supporting vulnerability remediation, and ensuring that security operations are delivered effectively across internal teams and outsourced service providers.

The successful candidate will bring strong experience across key areas of the cybersecurity operating model, including vulnerability management, cyber incident management, identity and privileged access management, security monitoring, ITIL-based service management, and the production of meaningful reporting, dashboards, KPIs and SLAs.

The IT Security SecOps Lead will coordinate and monitor the day-to-day security operations performed by internal teams and IT outsourcers. The role reports to the Head of IT Security.

Key responsibilities and accountabilities:

• Oversee cyber security monitoring activities across internal detection capabilities and outsourced security services.

• Coordinate cyber security incident response and recovery activities with technology teams, the Security Operations Centre and relevant service providers.

• Manage security operations service delivery, including production, monitoring and continuous improvement of SLAs, KPIs and operational dashboards.

• Oversee outsourced cyber security services, ensuring effective delivery, clear governance, timely escalation and appropriate challenge of service providers.

• Provide expert support and guidance to IT Security Officers responsible for security control execution, evidence gathering and control assessments.

• Support ITIL-based cyber security processes, including change management, incident management, problem management and operational risk reduction.

• Lead or contribute to cyber security projects in coordination with internal IT teams and IT outsourcers to strengthen LCH SA’s security posture.

• Prepare and present regular management reporting on SecOps activities, service performance, cyber risks and remediation progress.

What you'll be doing:

• Vulnerability Management:

• Monitor threat intelligence and coordinate urgent patching or mitigation activities where required.

• Review infrastructure, application and platform vulnerability scan reports; track, challenge and follow up remediation plans with technology teams.

• Cyber security incident management:

• Monitor and assess cyber security alerts and events generated by internal tools and outsourced security monitoring services.

• Provide expert support during incident response activities, including triage, containment, eradication, forensic coordination and recovery support.

• Cyber security projects: Lead or contribute to security initiatives and provide cyber security expertise to technology teams throughout project delivery.

• Cyber security controls: Perform selected security controls, such as anti-malware coverage reviews and firewall rule recertification, and provide expert input on controls assessed by other IT Security Officers.

• ITIL cyber security management: Review and challenge technology and business changes, problem closures and operational decisions that may impact the cyber security profile of the CCP.

You'll bring:

• Education:

Bachelor’s degree in Computer Science, Engineering, Cybersecurity or a related field, or equivalent professional experience.

• Professional experience:

At least 10 years of experience as a Security Engineer, Security Operations specialist or similar role, preferably in a regulated, complex and highly available environment.

Cyber security certifications such as CISSP, GIAC or equivalent would be an advantage.

Fluent English is mandatory, given the role’s regular interaction with teams across an international Group.

• Required technology expertise:

• Network Security

• Operating systems, databases, middleware and application security

• VMware Cloud Security

• Cloud technology expertise (SNC, AWS, Azure etc.)

• Secrets management

• Encryption

• Vulnerability Management

• EDR / AV

• IAM / PAM

• SIEM / SOC

• Soft Skills:

• Strong communication and stakeholder management skills,

• Teamwork, collaboration and ability to work across internal and outsourced teams

• Analytical thinking and problem-solving mindset,

• Adaptability, prioritization and ability to operate effectively under pressure.