Sr Manager, Incident Response

What You'll Do:

-Lead the Corporate Security Program
-Manage the SOC team
-Develop, publish, maintain, and enforce comprehensive organization-wide information security risk assessment framework, plans, policies, procedures, guidelines and controls that are aligned with the organization’s business needs
-Evangelize and provide SME knowledge on Information security matters
-Establish metrics and regular reporting mechanisms for assessing and measuring security, privacy, compliance and risk across the organization including metrics for the Public Bug Bounty program
-Manage planning, tracking and reporting including risk and issue tracking , developing schedules and managing interdependencies
-Develop process documentation
-Vendor Management (Including procurement related activities) and the 3rd party vendor risk management program
-Lead the incident response process and participate in vulnerability remediation efforts. Maintain the vulnerability management system and ensure compliance on SLAs for security bugs
-Identify and resolve systemic issues impacting IT and aggressively take action to resolve - including reviews, awareness, education and process controls
-Improve overall security awareness and instill a culture of secure software development throughout the IT organizations.
-Manage the ongoing training program for employees
-Manage various security governance, risk and compliance projects
-Establish credibility as a trusted advisor to partners including customers, executives, peers, and employees
-Maintain strong knowledge of ongoing security threats, remediation and operational standard methodologies
-Support and Manage Action Plans including exceptions to closure; including working with Risk owners to develop sustainable action plans that address technology, process and organizational risk areas.
-Manage relationships and relevant information sharing with members of the Information Security Team, broader IT Team as well as Lines of Business
-Act as an internal consultant within IT and business groups for Information Security Risk Assessments
-Help develop an effective Information Security Strategy by aligning Risk Management & Information Security Governance efforts with Information Security Technology Strategy and Information Security Threats
-Perform security audits and assessments of internal systems and third parties and recommend actions to mitigate risks through a review of efficiency, effectiveness and compliance of operational and security policies, processes and practices.
-Perform technical security assessment of solutions and recommend/review security designs and controls . Oversee and perform operational execution of the third party cyber risk management processes
-Act as primary trusted security advisor on projects to ensure that information security risks are managed and risk assessment process is followed including when interacting with 3rd parties
-Support periodic audit activities as they relate to the IT cyber security domain (e.g., GDPR, PCI, SOX
-Provide hands-on security expertise during design, development, implementation and testing of various IT projects
-Provide clear direction and mobilize others to take action on priorities
-Manage, coach and develop outstanding Information Security talent

What You've Done:

-US Citizenship is Required
-10+ years experience in Computer Science field
-Experience leading SOC or Incident Response teams
-Experience collaborating and being a strategic member of a Zero Trust rollout
-Experience owning detection engineering via Crowdstrike
-Experience reviewing cloud configurations and AWS Security solutions
-Experience performing continuous security validations and review of controls
-Knowledge of NIST CSF risk register
-Experience partnering with Threat Intelligence vendors and providing action around IOC hunts, blocks, detections, etc.
-Experience with vulnerability management via Tenable; running scans, remediation cycle with analysts