Cyber Security Incident and Performance Manager at Liquid Intelligent Technologies

Role Requirements

• Overseeing incident management and ticket performance for MSS and Global SOC Teams
• Co-ordinating incident response for P1/Sev1 incidents originating from the SOC
• Provides assurance reporting on case/incident performance as well as MSS and SOC customer requests

Creation and review of the following:

• Service Schedules including related MSS and SOC SLAs
• Incident Response Plans including RACI's
• Runbooks relating to ticket management
• Standard operating procedures relating ticket management
• Form templates to gather customer information required for onboarding to SOC security services
• Provide assistance and thought leadership in relation to backend support systems
• Provide reports conveying key metrics around incidents to management in order for them to make strategic decisions as well as to derive improvements which can be made to minimise risk in the future.
• Based on data collected from ticketing systems and team performance, apply analysis to determine root cause of deviations from SLA’s and performance standards, and then make suggestions to management on remediation actions to be taken. And once remediation strategy approved by management to then guide internal security team managers  to accomplish these goals.

Qualifications & Education Requirements

• One or more these industry Cybersecurity Certifications: CISM, CISA, CISSP-ISSEP, CISSP-ISSAP, GIAC Certified Incident Handler (GCIH), Certified Computer Security Incident Handler (CSIH), CEH, OSCP, CompTIA, CYSA+
• ITILv4, COBIT, Change Management or equivalent ITSM service assurance Qualification
• BRM Foundations

Experience Required

• Minimum of eight (8) years of work experience and three (3) years of relevant experience in information security/cybersecurity/networks
• Two (2) years of experience with working with cybersecurity incidents.
• Experience with a incident ticketing system such as BMC Remedy or Service Now.
• Experience with task and document automation technologies
• Experience with leading firewall, network scanning and intrusion detection products and authentication technologies.
• Strong analytical and organizational skills.
• Concise writing skills, excellent MS Word skills as well as other MS Office Applications.
• Strong reporting development skills. PowerBI will be advantageous.
• Experience with securing various environments preferred.
• Experience in working across security frameworks such as NIST, MITRE Attack and Lockheed Cyber Kill Chain.
• Experience in working across security technologies.
• Experience in working with diverse groups of people.