Cyber Defence Incident Manager

Job Description

Assistant ManagerRole purpose: The role of a Global Cyber Defence Incident manager is to provide efficient incident response and remediation to minimise the impact of cyber risks. The incident manager will oversee high severity security incidents, ensure incidents managed effectively and reported. You should have good written and verbal communication skills to coordinate with an extended community of global security professionals. You must be capable to operate in a challenging and fast paced environment. This role requires strong communication skills and experience to manage high severity incident calls with senior stakeholders. The Cyber Defence Incident Manager must be flexible to work on-call and in a shift model. They will provide guidance and governance for incident response containment, eradication and remediation activities. The role requires strong technical skills and the ability to make quick decisions.The incident manager will work with external partners and security teams across Vodafone to: Support the global implementation of Vodafone s cyber incident management operating model, frameworks, processes and tools Provide oral/written reporting and analytics to a broad range of stakeholders which includes technical staff and senior leadership Apply knowledge of networks, Active Directory and Privileged Access Management to reduce risk Create strong and supportive working relationships across a broad range of internal and external stakeholders in a culturally aware corporate environment Be part of the out of hours on call rota to provide 24/7 support. Effective engagement and communication with multiple stakeholders is expected, to ensure the progression of incident actions and provide an awareness of the risks. Holding industry accreditations is desirable but not essential. Candidates with significant incident response experience will be considered.Key accountabilities and decision ownership: Set-up, execution and timely progression of Vodafone s global cyber security incident management process Apply intelligence/situational awareness to prioritise incident actions based on risk Track and monitor incident actions Prepare metrics and KPIs on incident activity and report status to senior leadership Provide guidance to other security staff on efficient incident management and best practice Conduct lessons learned sessions with key stakeholders and record, track and monitor outcomes. Responsible for the continuous improvement and delivery of Cyber Incident Management as a functionCore competencies, knowledge and experience: A proven track record of cyber incident response experience with an ability to remain calm under pressure Project management skills and attributes Security related industry accreditations such as GIAC, CREST, CISM, CISP desirable but not essential Attention to detail, strong analytical skills and efficient problem solving. Cultural sensitivity and social flexibility in a global corporate environmentMust have technical and professional qualifications: Incident response experience in cyber, network/IT operations, military and intelligence Conversant with enterprise networking and security controls in Active Directory / Windows environments Knowledge of Active Directory Trusts sand Privileged Access Management best practices Excellent written and verbal communication skills. The ability to convey complex information to a non-technical audienceDescriptionThe Cyber Security Engineer supports in the provision of cyber security activities, aligning cyber security risk reduction with local market business and technology priorities and to the cyber security strategy to be implemented in the local market/s. The Cyber Security Engineer conveys a good understanding of established concepts and procedures to protect Vodafone from security threats reducing risk across Vodafone s technology infrastructure and implementing security controls across Vodafone with a single design. Typically reports to The Senior Cyber Security Team Leader.Job Responsibilities* Follows the cyber security baseline to deliver tasks which support the execution of the Cyber Security strategy, operating model and plan;* Supports the team to deliver the technical operation of the Cyber security platforms across their full lifecycle;* Supports the team to detect, identify and respond to cyber events, threats, security risks and vulnerabilities in line with the management response plan;* Delivers transformation, maintenance and projects activites in the market to make sure controls are effective and supporting business requirements;* Follows Cyber Defence best practices across the market/s ;* Performs other job-related duties or tasks defined by the supervisor or resulting from assigned agendas;SkillsSecurityRisk and Compliance,

Keyskills :
strong communication skillsrisk reductionsecurity riskactive directoryitilproblem managementcyber securityincident managementtechnical skillsslastrong analytical skillsaccess managementchange managementanalytical skills