Head of Security Incident Management (f/m/d)
GEA · Düsseldorf, Germany
Apply directly with the employer or job board. Applications are never handled here.
Information Security, Business Continuity & Crisis Management Germany, Düsseldorf November 1 2026 Full time Permanent Vorteile
Wettbewerbsfähige Vergütung und Bonusprogramm Kontinuierliche Personalentwicklung (E-Learning & Projekte) Freier Tag für ehrenamtliche Arbeit
Ihre Verantwortungsbereiche und Aufgaben:
As Head of Security Incident Management (f/m/d), you will be responsible for establishing, leading, and continuously improving GEA's Security Incident Management function. In close alignment with the CISO, you will ensure that security incidents are managed effectively, efficiently, and in a transparent, audit-proof manner across the organization.
- Own and drive all aspects of Security Incident Management within GEA
- Develop, implement, and continuously improve incident management policies, processes, and procedures
- Lead the Security Operations Center (SOC) and steer external SOC service providers
- Manage security incidents, compliance investigations, data leakage cases, and their reporting and follow-up activities
- Oversee threat intelligence, threat hunting, digital forensics activities, and offensive security initiatives
- Drive the technical implementation and enhancement of security monitoring and response capabilities, including ServiceNow, Microsoft Sentinel, automation, AI-driven capabilities, and detection engineering
- Coordinate complex IT, OT, production, and product-related security incidents and escalations through resolution
- Identify root causes, eliminate vulnerabilities, and advise stakeholders on risk mitigation and security improvements
- Collaborate closely with Information Security, IT, GEADigital, Compliance, Legal, HR, Production, Supply Chain, and other business stakeholders
- Define and execute short- and long-term Security Incident Management strategies, objectives, and governance frameworks
- Monitor and report SOC performance, KPIs, SLAs, risks, and service threats to the CISO and senior management
- Maintain relationships with external vendors, service providers, and regulatory authorities, including reporting security incidents when required
Ihr Profil und Ihre Qualifikationen:
- Master's degree in Information Security, Cybersecurity, Information Technology, Computer Science, Business Administration, or a related discipline
- Relevant security certifications such as CISM, ISMS Lead Implementor, ISMS Lead Auditor, ITIL, or COBIT are an advantage
- 5+ years of experience in Information Security and Cyber Security within IT and OT environments
- Several years of experience in IT Service Delivery, IT Operations, or IT Architecture
- Strong expertise in cyber security technologies, threat landscapes, security standards, networking, and network security
- Extensive experience with Microsoft security technologies, including Active Directory, Azure, Defender, Sentinel, and DLP
- Experience with SIEM/SOC environments, IDS/IPS technologies, firewalls, endpoint security, and security monitoring solutions
- Sound knowledge of Linux and Windows infrastructures, network architectures, system hardening, forensic analysis, and incident response
- Strong understanding of ITIL processes; knowledge of scripting and PowerShell is beneficial
- Proven experience managing vendors and external service providers.
- Strong leadership, coaching, stakeholder management, and negotiation skills
- Excellent analytical and problem-solving capabilities with a strategic mindset
- Strong communication and collaboration skills; fluent English is required, additional languages are a plus
- Experience with budget ownership and financial planning is advantageous
What Makes You Successful
- You combine strategic leadership with hands-on expertise in Security Incident Management
- You can confidently influence decision-making across complex stakeholder environments
- You have a strong ability to build partnerships, drive change, and continuously improve security operations
- You thrive in cross-functional environments and are passionate about strengthening organizational cyber resilience
What we offer:
- Work in a supportive, appreciative, and international team
- A modern work environment with flexible work options to ensure a healthy work-life balance
- A wide range of personal and professional training and development opportunities to support your career
- Company pension scheme and accident insurance
- 30 vacation days per year plus December 24th & 31st off
- Employee benefits such as discounts on gym memberships, language courses, etc.
- Subsidized job bike scheme
- Good public transport connections with travel allowance
- One additional day off for volunteering
- Global bonus program Über GEA
GEA ist einer der größten Systemanbieter für die Nahrungsmittel- und Getränkeindustrie sowie für ein breites Spektrum anderer Prozessindustrien. Rund 18.000 Mitarbeitende in mehr als 60 Ländern tragen maßgeblich zum Erfolg des Unternehmens bei – werden Sie Teil davon! Wir bieten Ihnen interessante und herausfordernde Aufgaben, ein angenehmes Arbeitsklima in internationalen Teams sowie attraktive Entwicklungs- und Aufstiegsmöglichkeiten in einem international tätigen Unternehmen.
Warum bei GEA arbeiten?
GEA ist ein Arbeitgeber, der Wert auf Chancengleichheit legt. Bewerbungen werden daher ohne Rücksicht auf Alter, Geschlecht, Rasse, Hautfarbe, Religion, Weltanschauung, nationale Herkunft, genetische Merkmale, Behinderungen, Geschlechtsidentität, Familienstand, sexuelle Orientierung, Veteranenstatus oder andere gesetzlich geschützte Merkmale berücksichtigt. Menschen mit Behinderungen sind willkommen und werden bei gleicher Eignung und Befähigung besonders in Betracht gezogen. Reach out to us
Contact us
Keep looking
1,000+ jobs in Germany where German isn’t required
Each listing is labeled by its local-language requirement. Updated daily.