Incident Response (Cyber)

Job Description

* Department: Insider Threat (Technology Risk) Job Location: BengaluruDepartment/Role at Morgan StanleyTechnology Risk (TR) Divisions mission is to deliver first-line defences to manage risks to Firm technology, information and cyber threats through risk identification, control management and assurance. This allows the business to operate and grow in a secure and legally-compliant manner.The Cybersecurity organization, under TR, is to create an agile, adaptable organization with the skills and expertise needed to defend against increasingly sophisticated adversaries. This will be achieved by maintaining sound capabilities to identify and protect our assets, proactively assessing threats and vulnerabilities and detecting events, ensuring resiliency through our ability to respond to and recover from incidents and building awareness and increase vigilance while continually developing our cyber workforce.We are looking for a talented individual to join a team of information security experts responsible for protecting Firm, client, and employee sensitive/confidential data. The Incident Response team, under the Insider Threat department, is responsible for managing the detection and reporting of information security and insider threat incidents, supporting all Firm Business Units. The team coordinates with the Business Units, Legal, Corporate Security and IT to gather incident details, assess risk and assist with remediation, ensuring compliance to regulatory and Firm standards. This is an excellent opportunity to join a dynamic global function at our Bengaluru office.Job Responsibilities Manage a team of incident responders to support the Firm s daily coordination and remediation of insider threat events Investigate and communicate incident details to management in a timely manner Manage Incident Response efforts to assess the criticality of an incident, appropriate mitigation activities, communication across the organization, and ensure proper documentation is produced outlining the details of the incident Proactively participate in the continuous review of information security incidents and root causes analysis, in order to highlight control gaps across the organization or process gaps within the team Provide general information security advisory services to key stakeholders across the Firm Serve as focal point for larger incidents, including providing awareness and debriefing to senior management Mentor and coach additional team members in the broader Insider Threat department Provide on call and out of hours support , Skills Required Bachelor s degree or equivalent10 years of experience in an incident management, information security, digital investigations, or similar role Leadership experience with people management in operations functions Ability to handle sensitive situations with discretion and maintain confidentiality Strong verbal and written English communications skills Ability to effectively host calls with senior members of the Firm, translate complex technical problems, and develop quick response plans to information security incidents Ability to handle multiple competing priorities, while maintaining attention to detail Strong working knowledge of Microsoft Office (Excel, PowerPoint, and Visio) Strong analytical skills, able to sort through raw data and identify true positives Flexible and self-motivator Able to work under tight timeline and pressure situations Skills Desired Working knowledge of incident tracking databases and DLP endpoint detection products Knowledge or experience in supporting Insider Threat mitigation strategies Technical or information security certificationsKnowledge in personal data protection or privacy regulations

Keyskills :
stronganalyticalskills businessunits microsoftoffice seniormanagement wealthmanagement analyticalskills peoplemanagement advisoryservices informationsecurity incidentmanagement informationsecurity igitalinvestigations