AVP - Security Incident Management

The AVP - Security Incident Management leads the incident response team within the Cyber Defense Center, ensuring timely and effective handling of security incidents. This role involves coordinating with various stakeholders, managing incident response processes, investigation, analysis, containment, recovery, communication, and reporting. The Incident Manager plays a vital role in safeguarding the organization’s digital assets and maintaining its cybersecurity posture.

Key Responsibilities:

• Strategic Oversight: Provide direction and oversight for the incident management process, ensuring alignment with organizational goals.
• Security Incident Management: Lead coordination of major security incidents and ensure relevant teams and stakeholders are effectively engaged.
• Policy & Procedure Development: Develop and refine incident management policies and procedures to address current and emerging threats.
• Continuous Improvement: Conduct post-incident reviews to identify lessons learned and implement improvements to prevent future incidents.
• Training & Mentorship: Provide training and mentorship to team members to ensure preparedness for handling incidents.
• Stakeholder Communication: Maintain effective communication with stakeholders, providing updates on incident status and resolution efforts.

Knowledge, Skills & Experience:

• Over 12+ years of experience in the information security domain with at least 6-8 years in Security Incident Response.
• Hands-on experience with SIEM/SOAR tools such as Sentinel, ArcSight.
• Knowledge of security standards and regulations (NIST 800-61, PCI, ISO 27035).
• Comprehensive understanding of regulatory and compliance requirements in the BFSI sector.
• Strong understanding of security incident response frameworks and application in policy creation.
• Relevant technical or computer science degree and professional certifications (GCIH, CISSP, CEH, FOR608, CISM, etc.) are preferred.

This position requires strong communication skills and the ability to collaborate with various teams to enhance security incident response resilience.

Location: Dubai, United Arab Emirates
Work Conditions: On-site, Full-time