Security Operations Senior Manager - CISO

About the Role

As part of our Information Security function, we need a leader who can fully own, manage, respond to, and investigate cybersecurity incidents. As the Security Operations Senior Manager, this person will lead a team of highly technical responders and will need to have a vision to ensure continuous improvement and maintain a high-performing team. The scope includes incident management, threat detection, and digital forensic investigation in combination with root-cause analysis of security flaws and vulnerabilities. The role is also expected to develop elegant solutions to complex problems and apply appropriate technologies while following security engineering best practices.

What You Will Do: Be the leader for the incident response team - manage, empower, nurture, support, and guide the team, and bring out the best in them

Effectively manage and lead cyber incidents (end-to-end) according to the incident response process and playbooks. Also, support operational security remediation activities based on lessons learned from post-mortem investigations of incidents.

Manage the various stakeholders (business and technical) during an incident with timely reporting and updates; manage the cybersecurity incident response and investigation on network, endpoint, and cloud infrastructure

Manage the work deliverables of their team and can set goals and priorities throughout the year

Provides strategic inputs into budget management and planning and other business activities, and also supports the Security Engineering team

Provides coaching, feedback, developmental opportunities, etc. to direct/indirect reports within a broader team

Build relationships with stakeholders and leadership across the organization to influence change and drive consistency with Information Security standards. Also enable collaboration, provide oversight, and guidance for periodic security assessments and improvements

Research and analyze local and global cyber threats that could impact the company.

What You Will Need: Successfully lead major incidents and investigations that involve various stakeholders

Seasoned leader who can manage a team of responders and investigators

Experience in managing senior stakeholders (including C-suites and Board of Directors) and a seasoned leader who can manage a team of responders and investigators

Experienced in conducting investigations within cloud and SaaS platforms (eg AWS, GCP, Tencent Cloud, Alibaba Cloud, O365, G Suite, containers, etc), SIEMs, SOAR and other automation, etc.

Experienced in working with the Security Engineering team: DevSecOps, Offensive Security, Cloud Security, Security Architecture

Ability to derive and translate technical jargon to business impact, and experience in driving change (organizational, cultural, and process) needed to respond to current and emerging threats

Experience in relevant industries (e.g., eCommerce, Logistics, FinTech, Banking) is a plus

Certified in one or more of the following security certifications is a plus: CISSP, CISA, CISM, SANS GIAC, or other relevant security certifications