Security Operations Centre Manager

Headquartered in Lachen near Zurich, Switzerland, the Octapharma Group is a leading company in the worldwide market for therapeutic human proteins. Working at Octapharma means to have an opportunity to contribute to our common goal – developing lifesaving therapies to improve patients’ lives.

About us

Headquartered in Lachen by the Lake Zurich in Switzerland, the Octapharma Group is a leading pharmaceutical Company in the world in the field of therapeutic human proteins.
Working at Octapharma it means you have an unique opportunity to do something truly meaningful for humanity, contributing to our common goals to deliver lifesaving treatments and improving patients’ lives.

Your role

Are you motivated, resilient and have a “can” do attitude towards improving cyber security?
Do you have a deep technical knowledge, and can communicate complex challenges and issues with others from different backgrounds in an easy to understand way?

We are looking for someone like you who can

• Improve and run the security operations centre and threat management (SOC) services with a product mindset, with an effective and positive collaboration with IT teams at multiple locations and security service providers.
• Design and improve processes to detect, investigate and respond to security alerts and incidents, leveraging technologies such as SIEM, XDR-SOAR, EDR/EPP, DLP, IDPs, etc.
• Deliver security incident response, forensics, documentation and reporting.
• Design and improve threat management processes and technologies to detect, investigate, respond, recover and learn from cyber threats identified in our IT and OT networks and systems.
• Design and continuously report business centric security metrics for the SOC services.
• Advise and coach IT colleagues to support handling of security alerts and incidents.
• Support delivery of vulnerability management services to protect our systems and network.
• Drive continuous improvement and implementation of our information security crisis management process including in local sites and offices business continuity plans.
• Proactively support ISRM colleagues on the design of security education training awareness program (SETA), with lessons learned and root causes identified in security incidents.

Your Team

You will be reporting to the Corporate Head of Information Security and Risk Management (ISRM).
The ISRM team is accountable for the design and implementation of Octapharma’s group security strategy and program. Because we are a privately owned company, we have a stable organization structure, long-term vision and strategy. This enable us to focus on delivering a security program which is truly focused on generating business value and protecting Octapharma.
In our team you will have opportunities to do hands on work, but also delivering through others, working shoulder to shoulder with IT and third party providers, and with business teams strengthening your business knowledge and skills.

Your abilities, knowledge and skills

• University Degree in Information Security, IT or equivalent
• Desirable: Relevant security certifications such as from ISC2, ISACA, CREST CCTIM or CCIM, SANS and Vendor Certifications.
• 12+ years of professional work experience in IT with relevant roles such as network engineering and operations and security engineering.
• 5+ years of experience in security operations preferable in organizations which have manufacturing business operations.
• Working knowledge with security protection and detection technologies such as NG Firewalls, IDPs, EDR/EPP, network and host segmentation, SIEM including XDR/SOAR, and Vulnerability Scanning and Management tools.
• Experience in security monitoring, detection and response for various technologies including Operations Technologies (OT) e.g. industrial and process control systems.
• Applied knowledge of common network services and known network vulnerabilities or attack patterns and threat actor TTP’s (Techniques, Tactics & Procedures), use of MITRE ATT&CK / Kill chain / threat modelling frameworks.
• Must be able to define project/program goals and roadmaps based on business / service customer needs and strategic direction and ensure that committed projects are delivered on schedule by the relevant team members.
• You are confident and able to communicate why through the work you deliver you are a business enabler.
• Beneficial: You have knowledge of GXP, CSV and pharmaceutical industry related regulations.
• You have strong verbal and written communication skills in English and beneficial German.
• You are resilient, self-reliant/self-motivated, proactive with high degree of accountability and you have excellent operating skills in a dynamic team environment.
• You are a strong communicator: presentation and training, relationship management, consultation, negotiation.
• You have a high level of personal integrity, ability to professionally handle confidential matters and convince by appropriate level of judgment and maturity.
• You can work in a matrix and geographically dispersed organization.
• If needed, you could travel around 30% of your working time (worldwide).
• These are further references to the USA NICE Framework with a detailed view of the abilities, knowledge and skills which are directly relevant for this role, or which require the applicant to manage delivery of these tasks through third party providers supporting the SOC and Threat Management Service.

• Analyse: Threat Analysis

• Collect and Operate: Cyber Operations

• Investigate: Cyber Investigation, Digital Forensics

• Protect and Defend: Cyber Defense Analysis and Incident Response

What we offer

We are around 12,000 employees, with six manufacturing sites in Europe, seven research and development centres, 190+ plasma collection centres and offices across the world. Being part of our IT organization, you will be working with our teams in different locations and able to:

• Develop and grow a professional career in an exciting, challenging and international environment.
• Be rewarded with an attractive salary and benefits package.
• You will have a high level of influence where you can make a difference and leave your footprint.
• Work with skilled and fun colleagues in a relatively informal organization.

Join Us

We are a truly global, collaborative, and friendly group of people. Having a diverse, inclusive, and respectful workplace is important to us. And we support your career development, internal mobility, and work-life balance. If this sounds interesting, apply now.

How to Apply

Please apply online in English describing your interest, expected salary, and enclosing your CV, references and/or recommendation letters.