Team Lead IT Security (M/F/D)

Team Lead IT Security Services (Warsaw, hybrid work)

The Team Lead IT Security Services is responsible for the operational leadership, development, and governance of all security-related services delivered by the TBS Shared Service Center. This includes the Security Operations Center (SOC), Vulnerability Management, Endpoint Security, Threat Detection & Response, and the implementation of global security standards. The role ensures that all security services are delivered reliably, efficiently, and in full compliance with global IT security policies.
The position is carried out within a direct employment contract and requires a high degree of professionalism, accountability, and service orientation. Activities are performed in line with the ITIL framework, ensuring structured, process-driven service delivery and continuous improvement. Serving as part of the management team’s rotating on-call responsibility for critical IT incidents.

Responsibilities:
▪ Leadership & Organization:
– Functional and disciplinary leadership of team members
– Resource planning, capacity management, and task prioritization
– Fostering collaboration, knowledge transfer, and continuous team development
– Supporting recruitment, onboarding, and employee development
– Manage day-to-day operations including prioritization, capacity planning, and escalations
– Conduct regular 1:1 meetings, performance reviews, and support training and upskilling activities
▪ Service Ownership & Delivery:
– Responsible for the operational delivery of the following services: Security Operations Center (SOC), SIEM & Log Management, Threat Detection & Response, Vulnerability & Patch Management, Endpoint Protection (EDR/XDR), Identity & Access Security
– Operational responsibilities include: Ensuring compliance with SLAs, KPIs, and internal security policies. Monitoring security events and driving incident response activities. Managing escalations and collaborating with ITIL-based Incident
Service Management. Coordinating with technical teams to ensure effective remediation and follow-up.
▪ Service Governance & Reporting:
– Planning and conducting regular Service Review Meetings with stakeholders and service owners
– Preparing service performance reports (KPIs, SLA compliance, capacity, cost)
– Identifying trends, risks, and improvement areas from review outcomes
– Ensuring transparency of service quality, costs, and roadmaps
– Define, implement, and improve security processes in accordance with ITIL and ISO 27001
– Create and maintain documentation, SOPs, runbooks, and operational guidelines
– Ensure audit readiness and compliance with corporate and regulatory requirements.
▪ Stakeholder & Relationship Management
– Acting as primary contact for business stakeholders and internal customers regarding Modern Work services:
– Building and maintaining strong relationships with stakeholders across IT and business units

– Present service performance, risks, and threat trends in operational and steering meetings
– Ensure clear communication to management regarding major incidents and risk posture
– Translating business requirements into technical service improvements
– Escalation management and communication in case of incidents or service degradations
▪ Strategy & Development
– Identify opportunities for process optimization, automation, and technological improvement.
– Support the development of security roadmaps and long-term enhancement strategies.
– Collaborate closely with Global IT Security, Architecture, and Governance teams.
– Contribute to security-related IT projects and transitions (e.g., SOC expansion, tool onboarding).
▪ Governance & Compliance
– Ensuring compliance with security, data protection, and regulatory requirements
– Preparing and supporting audits
– Establishing standards and best practices

Qualifications / Requirements
Education & Experience:
▪ Bachelor’s or Master’s degree in computer science, IT or related field (or equivalent experience)
▪ Several years of experience in IT Security Operations, Security Engineering, or Cyber Defense
▪ Proven leadership experience or senior technical role with people management responsibility
▪Experience with large-scale Microsoft 365 deployments and enterprise collaboration environments

Technical Skills:
▪ Strong knowledge in: SIEM / SOAR platforms, Endpoint Detection & Response (EDR/XDR), Vulnerability Management tools, Network and Cloud Security, Incident Response methodologies
▪ Experience with cloud security (Azure preferred)
▪ Experience working in global IT organizations or Shared Service Centers
▪ Familiarity with ITIL practices and service management processes

Soft Skills:
▪ Strong leadership and team management capabilities
▪ Excellent communication (English) and stakeholder management skills
▪ High level of initiative, accountability, and service orientation
▪ Strategic mindset combined with operational pragmatism
▪ Analytical mindset with the ability to handle complex security issues
▪ Ability to drive change and foster a culture of innovation and continuous improvement

Certifications (preferred but not mandatory):
▪ ITIL Foundation or higher-level certification
▪ ServiceNow Certification (e.g., CSA, ITSM-related)
▪ CISSP, CISM, CCSP
▪ Security+, CEH, GIAC
▪ Microsoft Security Certifications (SC-200, SC-300, SC-400)

We offer:

▪ Employment contract or B2B contract

▪ Hybrid working model – flexibility to work both remotely and on-site
▪ Seasonal payments – summer and winter allowances depending on household income
▪ Lunch subsidy – when working from the TRUMPF office, the company provides a lunch subsidy of 20 PLN per day (for a full 8-hour office day)
▪ Home office equipment subsidy – one-time support of 1,000 PLN to set up your remote workplace
▪ Language courses – opportunities to improve English and German skills
▪ Private medical care – comprehensive coverage through Medicover
▪ Life insurance – provided via PZU
▪ Sports & leisure benefits – subsidized Multisport card or access to a flexible benefit cafeteria
▪ Quarterly bonus payment based on team target achievement (e.g., KPIs set by the manager)
▪ Additional individual performance targets agreed with the manager
▪ Bonus levels increase progressively with seniority
▪ Access to training programs, certifications (e.g., Microsoft, ITIL, ServiceNow), and continuous learning opportunities
▪ Clear development paths, opportunities to take on responsibility, and international career prospects within the organization

We encourage everyone to apply – regardless of gender, age, ethnic background, sexual orientation, gender identity, disability, or any other individual differences.

Tagged as: azure, itil, microsoft, security, siem