Senior Cybersecurity Operations & Response SpecialistPlanon · Nijmegen, Gelderland, Netherlands

Senior Cybersecurity Operations & Response Specialist

🗓️ Posted 2026-09-17 Nijmegen, Gelderland, Netherlands Full-time Hybrid ICT
💰 Salary Not shared 📊 Market 4,500 EUR–6,500 EUR/mo

About the Company

Building Connections Planon is the leading global provider of Smart Sustainable Building Management software. We believe building users, owners and services providers deserve better and more integrated experiences. We connect buildings, people and processes, by eliminating data silos and aligning solutions into one shared information platform. By that, we empower all building stakeholders with actionable and meaningful insights. We create places where people work, live, play and learn, that are: Efficient, attractive, responsive and profitable Engaging, safe, healthy and resilient Sustainable and ESG compliant Powered by data and information We have a positive impact on our users' lives and our planet, empowering all to answer future needs and upcoming challenges. We build connections. With each other, with our clients and partners, and with our communities. Independent market research and consulting firms have consistently rated Planon as a global leader in the market. Planon has implemented its comprehensive solutions for more than 3,250 clients, supported by offices and partners around the world. Planon. Building Connections. IT Services and IT Consulting Specialties: Facilities Management Software, CAFM, FMIS, IWMS, GMAO, CMMS, Contract Management Software, Real Estate Software, Portfolio Management Software, Maintenance Software, Smart Buildings, Sustainable Buildings, Campus management, IoT, Lease Accounting Software, Campus Management Software, Asset & Maintenance Management Software, FSBS, Real Estate Management, Integrated Workplace Management Software, Energy & Sustainability Management Software

Responsibilities

  • ● At Planon, part of Schneider Electric, this role helps shape, govern and continuously improve our cybersecurity monitoring and incident response capabilities. You will work at the intersection of strategy, governance and operations, ensuring that our monitoring, detection and response processes remain effective, measurable and aligned with business, security and regulatory requirements.
  • ● Working across Cloud, Product, R&D and Global IT teams, you will define monitoring strategies, drive stakeholder alignment, oversee response performance and help coordinate actions during security incidents. While operational teams remain responsible for day-to-day execution, you play a key role in setting direction, removing obstacles, escalating risks and ensuring critical issues receive the attention they require.
  • ● What we can challenge you with:
  • ● Shape the monitoring strategy: Define and continuously improve our monitoring, detection and response approach in collaboration with key business and technology stakeholders.
  • ● Improve incident response: Strengthen incident response processes, escalation paths and response targets while coordinating significant security incidents and supporting communication and reporting obligations towards the Dutch NCSC (NIS2) and other relevant authorities where required.
  • ● Drive operational oversight: Monitor incident handling, remediation activities and security service performance, ensuring risks and delays receive appropriate attention.
  • ● Support security operations: Guide teams on monitoring and response activities, help remove blockers and assist when critical security issues require additional coordination.
  • ● Deliver management insight: Provide clear reporting on monitoring coverage, incident trends, response performance and key security risks.
  • ● Lead continuous improvement: Identify opportunities to improve monitoring capabilities, response effectiveness, tooling and operational processes.
  • ● Support assurance activities: Help maintain audit evidence, support customer assurance activities and demonstrate compliance with security and regulatory requirements.
  • ● You combine cybersecurity depth with a structured and collaborative way of working. You communicate clearly with technical and non-technical stakeholders, create focus when the path is still developing and follow through on priorities without taking over operational ownership.
  • ● This role is a great fit if you:
  • ● Have proven of minimum 6 experience in cybersecurity monitoring, incident response, SOC operations, threat detection or security operations governance.
  • ● Can develop monitoring strategies, governance frameworks, operating models and improvement roadmaps.
  • ● Understand logging, SIEM platforms, detection engineering, alert management, incident classification, escalation processes and remediation workflows.
  • ● Have experience coordinating stakeholders during incidents and driving actions across multiple technical teams.
  • ● Can translate technical findings into clear and actionable management reporting.
  • ● Are comfortable challenging overdue actions, managing risk discussions and escalating issues when necessary.
  • ● Have working knowledge of security, privacy and regulatory requirements relevant to European SaaS organizations.