The Incident Response Manager will lead the Cyber Security Incident Response unit, overseeing day-to-day operations and managing the Security Operations Center (SOC) shifts. This role involves collaboration with various internal teams, departments, external partners, and cybersecurity agencies to ensure effective and timely responses to security incidents. The manager is expected to exhibit strong leadership skills, foster teamwork, optimize team performance, and develop incident response strategies.
Key responsibilities include managing L3 security incidents from detection to resolution, utilizing AI-driven threat detection, and maintaining robust incident response frameworks based on industry standards such as NIST and MITRE ATT&CK. Strong crisis management and stakeholder communication skills are crucial for coordinating during high-impact security events.
Key Responsibilities:
- Lead and manage the Cyber Security Incident Response unit, including strategic development of incident response capabilities.
- Develop and refine incident response plans and strategies for effective breach response.
- Supervise staff utilization of security monitoring tools and provide guidance for high team performance.
- Communicate incident findings effectively to leadership and stakeholders.
- Prepare post-incident reports, detailing lessons learned and preventive measures.
- Manage SOC shift schedules for optimal resource utilization and 24/7 coverage.
- Establish and track key performance metrics for incident management.
Required Skills and Qualifications:
- Proven experience managing security operations centers and incident response teams.
- Expertise in handling complex L3 security incidents.
- Strong leadership and motivational skills.
- In-depth knowledge of information security principles and the cyber threat landscape.
- Excellent communication and interpersonal skills.
- Familiarity with security standards (ISO 27001, PCI DSS, etc.) and incident response frameworks (NIST, MITRE ATT&CK).
- Bachelor's degree in engineering, IT, or related technical discipline.
- Relevant certifications in cybersecurity and incident management (e.g., CISSP, CISM).
Experience:
- More than 10 years of experience in information security, especially incident management within banks or financial institutions.
- Experience managing a Computer Incident Response Team (CIRT) or Security Operations Center (SOC).
This role requires a dynamic leader capable of adapting to rapidly changing threats while ensuring communication and operational efficiency during security incidents.
Location: Abu Dhabi, Abu Dhabi Emirate, United Arab Emirates
Work Conditions: On-site, Full-time
