AVP - Security Incident Management

This role leads the incident response team within the Cyber Defense Center, ensuring timely and effective handling of security incidents. The Incident Manager coordinates with various stakeholders, manages incident response processes, conducts investigation and analysis, and oversees containment, recovery, communication, and reporting efforts. The position is crucial for safeguarding the organization’s digital assets and maintaining a strong cybersecurity posture, providing strategic direction and oversight for the incident management process to align with organizational goals and objectives.

Responsibilities

• Lead the coordination of major security incidents/crisis management, ensuring that all relevant teams and stakeholders are effectively engaged and provide appropriate technical insights to the Crisis Management Team (CMT).
• Develop and refine incident management policies and procedures, ensuring they are up-to-date and effective in addressing current and emerging threats.
• Conduct thorough post-incident reviews to identify lessons learned and implement improvements to prevent future incidents.
• Provide training and mentorship to other team members, ensuring the team is well-prepared to handle incidents.
• Maintain clear and effective communication with stakeholders, providing updates on incident status and resolution efforts.

Required Skills

• Over 12+ years of rich experience in the information security domain and at least 6-8 years of dedicated experience in Security Incident Response.
• Hands-on experience in implementing and operationalizing SIEM/SOAR tools such as Sentinel, ArcSight, etc.
• Experience in defining and reporting KPIs for Security Incident response.
• Familiarity with advanced SOC monitoring technologies, risk, threat, and security measures.
• Strong understanding of key security standards and regulations such as NIST 800-61, CERT/CC, PCI, ISO 27035, etc.

Qualifications

• The ideal candidate will have a technical or computer science degree.
• Professional certifications: GCIH, CISSP, CEH, FOR608, CISM, etc.
• Knowledge of evolving advanced tech stacks and related control and risk universe from a SOC perspective.
• Knowledge and expertise in conducting risk assessment and management.

Location
United Arab Emirates