Sr Manager, Incident Response

Are you looking for an exciting opportunity to enhance your cyber security leadership skills and experience? We are looking for a dedicated Senior Manager, Incident Response to work with our service delivery teams that provide extensive MSSP services to a large client of ours!

As an embedded Cyber Security leader with our customer, you will be responsible for an offshore team of Security Analysts that manage and monitor 2,500+ end points. You will be working day-to-day with the Head of Product Security and the Chief Legal Officer as part of the team that mitigates risk and secures the organization against outside threats. The role will be strategic in leading a SOC team, incident response, detection coverage and tuning, and help with performing security reviews and board-level dashboards.

The position is required to be onsite 3 days per week, Tuesday, Wednesday, Thursday.

What You'll Do:

-Lead the Corporate Security Program

-Manage the SOC team

-Develop, publish, maintain, and enforce comprehensive organization-wide information security risk assessment framework, plans, policies, procedures, guidelines and controls that are aligned with the organization’s business needs

-Evangelize and provide SME knowledge on Information security matters

-Establish metrics and regular reporting mechanisms for assessing and measuring security, privacy, compliance and risk across the organization including metrics for the Public Bug Bounty program

-Manage planning, tracking and reporting including risk and issue tracking , developing schedules and managing interdependencies

-Develop process documentation

-Vendor Management (Including procurement related activities) and the 3rd party vendor risk management program

-Lead the incident response process and participate in vulnerability remediation efforts. Maintain the vulnerability management system and ensure compliance on SLAs for security bugs

-Identify and resolve systemic issues impacting IT and aggressively take action to resolve - including reviews, awareness, education and process controls

-Improve overall security awareness and instill a culture of secure software development throughout the IT organizations.

-Manage the ongoing training program for employees

-Manage various security governance, risk and compliance projects

-Establish credibility as a trusted advisor to partners including customers, executives, peers, and employees

-Maintain strong knowledge of ongoing security threats, remediation and operational standard methodologies

-Support and Manage Action Plans including exceptions to closure; including working with Risk owners to develop sustainable action plans that address technology, process and organizational risk areas.

-Manage relationships and relevant information sharing with members of the Information Security Team, broader IT Team as well as Lines of Business

-Act as an internal consultant within IT and business groups for Information Security Risk Assessments

-Help develop an effective Information Security Strategy by aligning Risk Management & Information Security Governance efforts with Information Security Technology Strategy and Information Security Threats

-Perform security audits and assessments of internal systems and third parties and recommend actions to mitigate risks through a review of efficiency, effectiveness and compliance of operational and security policies, processes and practices.

-Perform technical security assessment of solutions and recommend/review security designs and controls . Oversee and perform operational execution of the third party cyber risk management processes

-Act as primary trusted security advisor on projects to ensure that information security risks are managed and risk assessment process is followed including when interacting with 3rd parties

-Support periodic audit activities as they relate to the IT cyber security domain (e.g., GDPR, PCI, SOX

-Provide hands-on security expertise during design, development, implementation and testing of various IT projects

-Provide clear direction and mobilize others to take action on priorities

-Manage, coach and develop outstanding Information Security talent

What You've Done:

-US Citizenship is Required

-10+ years experience in Computer Science field

-Experience leading SOC or Incident Response teams

-Experience collaborating and being a strategic member of a Zero Trust rollout

-Experience owning detection engineering via Crowdstrike

-Experience reviewing cloud configurations and AWS Security solutions

-Experience performing continuous security validations and review of controls

-Knowledge of NIST CSF risk register

-Experience partnering with Threat Intelligence vendors and providing action around IOC hunts, blocks, detections, etc.

-Experience with vulnerability management via Tenable; running scans, remediation cycle with analysts