{"id":3466686,"url":"https://alion.io/job/reintech-information-security-operations-lead","title":"Information Security Operations Lead","company":{"id":3188803,"name":"Reintech","domain":"reintech.io","url":"https://alion.io/company/reintech","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":true,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Lviv, Ukraine"],"countries":["UA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":28000,"max_usd":74000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":753},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Incident Management","optional":false},{"name":"ISO 27001","optional":false},{"name":"SIEM","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"Splunk","optional":true}],"status":"closed","first_seen_at":"2026-10-07T11:39:06Z","employer_posted_date":null,"last_verified_at":"2026-11-07T09:42:10Z","board_verified":false,"closed_at":"2026-11-07T09:42:10Z","days_open":30,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":30},"description":"We are looking for an Information Security Operations Lead to own the company’s day-to-day security operations — from incident response and SOC performance to vulnerability management, access governance, and ISO 27001 readiness. The role reports to the CISO, sits within the Security & Risk Department, and is the main point of contact for operational security across IT and other business units.\n\nResponsibilities\n\nAct as the single point of contact for IT, R&D, Manufacturing, and other departments on operational security matters, including reviews for new services, integrations, and vendor access\n\nLead and coordinate the SOC analyst team: prioritization, quality control, mentoring, performance management\n\nOwn incident response end-to-end: coordinating participants, timeline and communication, containment, remediation, and reporting with lessons learned for the CISO\n\nMaintain SOC playbooks, runbooks, and triage/response procedures; run regular case reviews and turn findings into process improvements\n\nImprove SIEM detections, reduce false positives, and drive automation\n\nDrive vulnerability remediation together with IT: prioritization, timelines, tracking, and overdue reporting\n\nOrganize regular access reviews together with IT and system owners\n\nOwn SOC-related ISMS controls under ISO 27001 (incident, vulnerability, and log management per Annex A); prepare audit evidence for internal and certification audits\n\nMaintain the security incident register per ISMS requirements and close related corrective actions within agreed timelines\n\nContribute operational incident and threat data to risk assessment reviews\n\nTrack and report security operations metrics (MTTD, MTTR, SLA, overdue vulnerabilities) to the CISO and leadership\n\nRequired Skills & Experience\n\n5+ years of experience in SOC, Incident Response, or Security Operations\n\nExperience leading a SOC team or acting as a technical lead\n\nHands-on experience with SIEM, EDR/XDR, and incident management\n\nExperience coordinating vulnerability management and access reviews with IT\n\nHands-on experience with ISO 27001 or a similar security framework\n\nStrong stakeholder management and communication skills, including with non-technical audiences\n\nNice to Have\n\nCloud security experience (AWS, Azure, GCP)\n\nSOAR, automation, or scripting experience\n\nExperience supporting ISO 27001 certification audits\n\nCertifications: CISSP, GCIH, GCIA, SC-200, Splunk, or similar\n\nThe company offers:\n\nOfficial employment with a competitive salary and clear, transparent terms of cooperation.\n\nPaid vacation (24 calendar days per year) and paid sick leave.\n\nSupport for your professional growth — the company is actively expanding, and you’ll have the opportunity to grow together with it.\n\nAn atmosphere of trust, open communication, and leadership — initiative is welcomed, ideas are brought to life, and the team supports your progress.","description_format":"text","description_chars":2893,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Marketplaces"],"lifecycle":[{"event":"open","at":"2026-10-29T15:24:45Z"},{"event":"close","at":"2026-11-07T09:42:10Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/reintech-information-security-operations-lead","json_url":"https://alion.io/job/reintech-information-security-operations-lead.json","meta":{"generated_at":"2026-11-08T08:36:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18652,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3188803},"rest":"https://alion.io/mcp/rest/get_company?id=3188803"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Freintech-information-security-operations-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Freintech-information-security-operations-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Freintech-information-security-operations-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/reintech-information-security-operations-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Freintech-information-security-operations-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3466686}},{"tool":"search_jobs","arguments":{"company":"reintech.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3466686},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}