Operational Security Coordinator SECOP

Project overview

I am looking for an Operational Security Coordinator (SECOP) for one of our clients.

The SECOP team contributes to cyber risk management and the operational security of the information system.

Its activities include:

Ensure the proper coordination of operational security activities, from the detection of an event or vulnerability to its resolution and the closure of the action plan.

The SECOP coordinator brings structure, rhythm, and visibility to the team's activities.

They do not replace technical experts, the CISO, or infrastructure and application managers. However, they ensure that issues are handled, investigated, arbitrated when necessary, followed up until resolution, and communicated correctly.

The position should notably prevent significant vulnerabilities from remaining in a diffuse circuit between the publisher, infrastructure, operations, and security. Recent discussions on IBM API Connect precisely illustrate the importance of clear coordination between detection, exposure analysis, product owner identification, and technical treatment.

In conjunction with the VOC:

The SECOP trajectory explicitly aims for prioritization of critical risks, reduction of vulnerability debt, and strengthening of remediation SLAs.

This is an important point given your context: recent incidents show that cells can simultaneously mobilize SECOP, operations, Linux, network, IAM, publishers, and integrators.

The coordinator will be a key contact point between SECOP and:

They facilitate the translation of cyber risk into understandable and actionable operational tasks.

I would particularly emphasize the quality of analysis files: your discussion this morning precisely shows your expectation that risk analyses clearly present the CVE level and the infrastructure area concerned.

Work environment

• Detection and reaction to security events via the SOC;
• Vulnerability management via the VOC;
• Identity and access management and governance;
• Coordination of operational treatment of security incidents and situations.
• Coordinate SECOP operational activity
• Organize daily follow-up of security topics.
• Qualify and prioritize requests with the relevant experts.
• Identify those responsible for different actions.
• Ensure commitments and deadlines are met.
• Follow up with stakeholders when necessary.
• Maintain a consolidated view of ongoing topics, blocking points, and risks.
• Coordinate vulnerability treatment
• Track detected vulnerabilities;
• Organize their investigation with technical teams;
• Consolidate elements for assessing exposure and risk;
• Track remediation plans;
• Identify and escalate deviations or blockages;
• Ensure traceability of decisions.
• Contribute to security incident management
• Participate in qualifying alerts and significant events.
• Quickly mobilize necessary teams.
• Coordinate technical cells when the situation requires it.
• Formalize decisions and actions.
• Ensure follow-up until a controlled situation is restored.
• Prepare elements for lessons learned (RETEX).
• Ensure coordination with the IT ecosystem
• Infrastructure and Platforms teams;
• Operations and Monitoring;
• Application teams;
• The Service Center;
• Risk / Control / Security functions;
• The CISO;
• Cyber partners and service providers.
• Manage and ensure the reliability of SECOP processes
• Formalize treatment and escalation circuits.
• Identify ambiguous areas of responsibility.
• Improve workflows and traceability.
• Contribute to the automation of recurring tasks.
• Ensure the quality of analysis files and elements transmitted to management.
• Produce management and reporting
• Consolidate SOC / VOC / IAM indicators.
• Identify trends and points of vigilance.
• Prepare elements for SSI committees and steering committees.
• Present a synthetic view: risk / impact / expected decision / responsible person / deadline.
• Follow up on improvement plans.

Project details

• Start: ASAP
• Duration: 1 an renouvelable
• Remote: hybrid
• Location: Paris, Île-de-France, FR
• Languages: French