IT Security Analyst EMEA Retail (H/F)

Job description

If you’ve worn a pair of glasses, we’ve already met. We are a global leader in the design, manufacture, and distribution of ophthalmic lenses, frames, and sunglasses. We offer our industry stakeholders in over 150 countries access to a global platform of high-quality vision care products (such as the Essilor brand, with Varilux, Crizal, Eyezen, Stellest and Transitions), iconic brands that consumers love (such as Ray-Ban, Oakley, Persol, Oliver Peoples, Vogue Eyewear and Costa), as well as a network that offers consumers high-quality vision care and best-in-class shopping experiences (such as Sunglass Hut, LensCrafters, Salmoiraghi & Viganò and the GrandVision network), and leading e-commerce platforms. Join our global community of over 190,000 dedicated employees around the world in driving the transformation of the eyewear and eyecare industry. Discover more by following us on LinkedIn! Your #FutureInSight with EssilorLuxottica Are you willing to pioneer new frontiers, foster inclusivity and collaboration, embrace agility, ignite passion, and make a positive impact on the world? ​Join us in redefining the boundaries of what’s possible!​ About the role : The IT Security Specialist plays a key role in safeguarding the organization’s EMEA retail IT landscape. The position covers Governance, Risk & Compliance (GRC) activities within the BeNe Optical retail organization and Security Operations across the EMEA retail environment. The role is embedded within the Global S ecurity Operations Center (SOC) Level 2 team 3 working days per week, with a strong focus on security monitoring, incident detection, investigation, and response, leveraging modern SIEM and XDR technologies. 2 working days per week, the role is reserved for BeNe Optical retail for GRC Governance and Local security oversight. What you will do : 1. Governance, Risk & Compliance (GRC) and Operational Support. (BeNe Optical Retail Scope) : · Register, monitor, and report on objectives and activities within IT Security processes in collaboration with Benelux business and IT stakeholders. · Maintain, configure, and continuously improve the Information Security Management System (ISMS) within GRC tooling. · Register, track, and report security incidents within GRC tooling. · Provide advice to the Benelux Retail Information Security Officer on information security measures. · Support vulnerability management with a primary focus on operational remediation coordination and prioritization. · Act as an information security advisor for new IT solutions and major changes to the IT Benelux infrastructure. 2. Security Operations (EMEA Optical Retail Scope) : · Operate as an embedded analyst within the Global SOC Level 2 team, supporting EMEA retail operations. · Monitor, triage, investigate, and respond to security alerts and incidents, ensuring timely detection, containment, remediation, and escalation. · Manage and investigate security alerts partially escalated by an external Level 1 (L1) SOC via a ticketing system, while handling other alerts directly within the XDR platform. · Utilize and optimize XDR platforms, including Microsoft Defender and Palo Alto Cortex, to enhance threat detection and response. · Correlate events across endpoints, identities, networks, and cloud environments to identify advanced and persistent threats. · Support the deployment, onboarding, and troubleshooting of XDR solutions, including endpoints, identities, networks, and cloud workloads. 3. Reporting & Stakeholder Management : · Provide regular and ad-hoc reporting to the Global IT Security Operations Manager and the Bene Optical Retail Information Security Officer. · Act as a liaison between Global Security Operations and the Benelux retail organization, ensuring alignment between global operations and local governance requirements. · Participate in IT security–related meetings and stakeholder consultations. What sets you apart : · Proven experience in Security Operations (SOC), preferably at Level 2. · Demonstrated expertise in XDR solutions, such as Microsoft Defender and Palo Alto Cortex. · Experience with security incident detection, investigation, and response across endpoint, identity, network, and cloud environments. · Solid understanding of common attack techniques, threat vectors, and incident response methodologies. · Experience working in international or distributed environments, preferably within retail or large enterprise organizations. · Strong analytical skills and the ability to communicate technical findings clearly to both technical and non-technical stakeholders. · Experience in Governance, Risk & Compliance (GRC) processes, including audits, ISMS management, and policy implementation. · Fluent in English, both written and spoken. Preferred Qualifications : · Knowledge of ISO 27001, NIST, or similar information security frameworks. · Experience with vulnerability remediation coordination in enterprise environments. · Dutch language proficiency (spoken and written) is preferred. · Relevant certifications such as GCIH, GCED, SC-200, AZ-500, or Palo Alto certifications are a plus. Recruitment process : 3 interviews - Our recruitment process may vary; If you are selected, you will be contacted by our recruiters to guide you through the specific steps for your application.​ Our Diversity, Equity and Inclusion commitment​ We are committed to creating an inclusive environment for all employees. We celebrate diversity and provide equal opportunities to all, regardless of race, gender, ethnicity, religion, disability, sexual orientation, or any other characteristic that makes us unique.