Cyber Security Services (CSS) Team Lead

About the role

Stefanini is looking for a Cyber Security Services (CSS) Team Lead to take ownership of one of its Security Operations Center (SOC) delivery teams, which runs 24x7 on dedicated or shared resources depending on the project. The role combines people management, technical coordination and client engagement, acting as the single point of contact for assigned accounts and covering everything from shift coverage and SLA adherence to client reporting and team development. It spans Security Monitoring, Detection & Response, Platform Management and Phishing Response.

Key responsibilities

• Mentor, coach and lead the team, manage schedules, timesheets, 1:1s, performance reviews and career guidance, and act as backup to other people managers
• Act as SPOC with customers' technical stakeholders, translate their needs into actions, and lead technical and service review meetings with reporting
• Own end-to-end incident handling, including out-of-hours escalations, resource coordination, documentation quality and lessons learned
• Monitor SLAs and KPIs, oversee the use of AI-assisted tooling, and prepare regular performance reports for clients and internal stakeholders
• Align technical execution with client compliance obligations such as NIS2, DORA and GDPR, and escalate cross-service dependencies

Required profile

• Bachelor's degree in a relevant field or equivalent professional experience
• Minimum 2 years of experience leading cybersecurity operations teams, with demonstrated leadership and stakeholder management
• A technical background from previous hands-on roles is highly valued
• Excellent written and spoken English
• Desired: relevant cybersecurity, IT or management certifications, experience managing 24x7 rotating-shift teams, and familiarity with AI governance or human-in-the-loop oversight

Required skills

• Networking (TCP/IP, DNS, routing/switching basics) and Windows and/or Linux server administration
• Familiarity with cloud platforms (Azure, AWS or GCP)
• Exposure to ITIL and experience owning SLA/KPI reporting
• Basic knowledge of frameworks such as MITRE ATT&CK, NIST CSF and ISO/IEC 27001
• Understanding of NIS2, DORA and GDPR incident reporting; comfort with ticketing, monitoring or ITSM tooling; SIEM/EDR/XDR/SOAR exposure is a plus

What we offer

• Ownership of a full-scope SOC delivery team and a clear path to broader service management or security leadership roles
• Soft skills and technical training, mentoring programs and employee assistance programs
• Career development, referral bonuses and a supportive, collaborative team