Description
You will lead the response to significant cyber incidents and act as a subject matter expert for senior leadership regarding business impact and risk mitigation.
Responsibilities
- Lead and coordinate structured responses to significant cyber incidents, managing the process from evaluation through to resolution.
- Develop incident containment plans and remediation strategies, presenting tactical and strategic plans to stakeholders and third parties.
- Direct incident investigations to establish the extent of attacks and coordinate with Threat Intelligence teams to manage briefings and status reports.
- Manage vulnerability assessment and prioritization processes to ensure coordinated remediation efforts.
- Drive continuous improvement of incident management principles, playbooks, templates, and response exercises.
- Translate complex technical incidents into business terms for management and executive-level briefings.
Required Skills
- 5+ years of experience managing, investigating, and responding to cyber incidents.
- Proven experience in crisis management and coordinating cross-organizational responses.
- Working knowledge of SIEM architecture, XDR, and Incident Response tooling.
- Deep understanding of Vulnerability Management processes and tools.
- Experience using Threat Intelligence platforms to analyze and interpret threat data.
- Strong ability to perform root cause analysis and identify technical trends.
- Expertise in business continuity and disaster recovery procedures.
- Demonstrable ability to handle high-pressure technical situations and multiple competing priorities.
- Relevant certifications such as C|GIH, CISM, GCIH, or GCFA.
Preferred Skills
- Strong background in Cyber Incident Management.
- Extensive experience communicating with senior leadership and technical stakeholders.