incident response manager

البنك التجاري الدولي

<div></div><div><div>Description<div></div><p><br>
JOB PURPOSE</p>
<p>
To oversee and manage the Security Operations Center (SOC) related activities including, threat monitoring, triage and response to develop detailed root cause analysis and escalate for emergency response as per the approved process.</p><br>
<p>
</p><p>Description</p>
<p>
Security Incident Response Management</p>
<p>
1. Provide management oversight for the identification, triage and response of events or incidents of apparent security breaches to maintain the security posture.
</p><p>2. Conduct Security event analysis reporting on activities through regular scheduled reporting and communications in order to highlight the main incidents and events.
</p><p>3. Identify and handle incidents, which need special attention or escalation to secure the overall bank&rsquo;s security and mitigate potential risks.
</p><p>4. Direct the creation and maintenance of incident response run books of the Analysts team run-books.</p>
<p>
5. Act as a lead throughout incident scenarios and provide subject matter expertise in cybersecurity incident response to facilitate the investigation and root cause analysis.</p>
<p>
6. Ensure proper reporting for daily, monthly, quarterly and annual security posture, SOC and executive reporting and dashboards.</p>
<p>
7. Recommend security solutions based on security postures and gaps identified.</p>
<p>
8. Manage communication with other departments to facilitate investigation process.</p>
<p>
9. Develop and update SLA between SOC and other departments when required and maintain SLA.</p>
<p>
Strategy</p>
<p>
10. Participate in the formulation and implementation of the Security Operations Center Department strategy to ensure the alignment with CIB strategy</p>
<p>
Policies, Processes and Procedures</p>
<p>
11. Participate and recommend improvements to policies, processes and procedures and manage their implementation to ensure all relevant procedural/legislative requirements are carried out.</p>
<p>
Day-to-day Management</p>
<p>
12. Supervise the day to day operations of the Incident Management &amp; Response team providing some guidance in the related area, encouraging teamwork and facilitating related professional work processes in order to achieve high performance standards</p>
<p>
Supervision</p>
<p>
13. Supervise the activities and work of subordinates to ensure that all work within a specific area is carried out in an efficient manner and in compliance with the set policies, processes and procedures</p>
<p>
Compliance</p>
<p>
14. Ensure compliance with all relevant CBE regulations, banking laws, AML regulations and internal CIB policies and code of conduct in order to maintain CIB&rsquo;s sound legal position and mitigate any potential risks</p><div><br>
</div></div><div>
Qualifications<div></div><p><br>
Qualifications &amp; Experience</p>
<ul><li> Bachelor&rsquo;s degree of Engineering, Computer Science or equivalent</li></ul>
<ul><li> Minimum 8 - 10 years of experience in IT Security or related fields</li></ul>
<ul><li> Strong understanding of incident handling procedures
</li></ul><ul><li> Experience with packet and log analysis using commercial and open source tools</li></ul>
<ul><li> Recommended Certifications:</li></ul>
<p>
o Certified Information Systems Security Professional (CISSP)</p>
<p>
o Certified Information Security Manager (CISM)</p>
<ul><li> Mandatory Certification:</li></ul>
<p>
o GIAC Certified Incident Handling (GCIH)</p><br>
<p></p>
<p>
Skills</p>
<ul><li> Very good command of English and Arabic language</li></ul>
<ul><li> Very good Analytical skills</li></ul>
<ul><li> Very good Communication skills</li></ul>
<p>
Very good MS Office skills<br>
</p><div>
</div></div><div>Primary Location: Egypt-Giza-SMART VILLAGE BLDG. 2</div><div>
Job: Back Office</div><div>
Organization: FINANCE, STRATEGY, OPERATIONS &amp; TECHNOLOGY</div><div>
Shift: Day Job</div><div>
Job Type: Full-time Employee</div></div>

SECURITY INCIDENT RESPONSE MANAGER

Openkyber

<div><p><b>Role Overview,</b> The SOC Lead / Incident Manager will oversee 24x7x365 Security Operations Center (SOC) functions for the Congressional Budget Office vSOC program. This role requires strong leadership in incident response, SLA enforcement, and team management, with hands-on expertise in Microsoft Sentinel and Defender environments. The SOC Lead will serve as the escalation authority, ensuring operational excellence, audit readiness, and compliance with federal frameworks such as NIST SP 800-53 and FISMA .</p>
<p><b>Key Responsibilities</b></p>
<ul><li>Lead Tier I/II/III SOC operations with full escalation authority.</li>
<li>Enforce SLA-driven performance standards ( 15 min triage, 1 hr investigation, 2 hr escalation).</li>
<li>Oversee the incident lifecycle from triage through investigation, response, and closure.</li>
<li>Act as incident commander during high-severity events, coordinating stakeholder communication.</li>
<li>Review and approve incident classifications, escalations, and remediation actions.</li>
<li>Conduct daily/weekly operational reviews, tracking incident trends and performance metrics.</li>
<li>Collaborate with engineering teams to improve detection rules and reduce false positives.</li>
<li>Ensure all incidents are documented and audit-ready for compliance assessments.</li>
</ul><p><b>Required Skills &amp; Qualifications</b></p>
<ul><li>8 10+ years of experience in SOC operations and incident management .</li>
<li>Strong expertise in Microsoft Sentinel, Defender XDR , and SIEM/SOAR platforms (Splunk, QRadar, ELK).</li>
<li>Proven ability to lead cross-functional SOC teams and enforce SLA compliance.</li>
<li>Hands-on experience with ServiceNow, Jira, Power BI, KQL, and Log Analytics .</li>
<li>Deep knowledge of NIST SP 800-53, NIST 800-61, FISMA, and FedRAMP frameworks.</li>
<li>Certifications (Preferred / Mandatory) CISSP (Certified Information Systems Security Professional) GIAC (GCIH / GCIA / GCFA) Microsoft Certified: Security Operations Analyst (SC-200) ITIL / PMP (optional but valuable for governance)</li>
</ul><p>PALNAR, the trade name of Palayekar Companies Inc. founded in 1997, delivers global software and technology services. Headquartered in Cranbury, New Jersey - United States, with operations in India (Noida and Goa), OpenKyber provides software consulting, development, IT Support service and ongoing technology support worldwide.</p>
<p><b>For applications and inquiries, contact:</b> hirings@openkyber.com</p></div>

SOC Manager

Qiddiya Investment Company

<div><p>Qiddiya Investment Company is seeking an experienced and strategic Manager - Cybersecurity Threat Management to lead our threat management initiatives. In this leadership role, you will be responsible for overseeing the detection, analysis, and mitigation of cybersecurity threats to safeguard the organization's critical information assets and infrastructure.</p><p>
You will drive the development and execution of advanced threat intelligence programs and incident response strategies, collaborating with various teams to ensure a proactive and effective security posture.</p>
Key Responsibilities<ul>
<li>Lead the cybersecurity threat management program, including threat intelligence collection, analysis, and dissemination.</li>
<li>Oversee incident detection and response activities, ensuring timely and effective handling of security incidents.</li>
<li>Develop and implement advanced threat hunting and mitigation strategies tailored to organizational risks and needs.</li>
<li>Collaborate with internal and external stakeholders to enhance threat intelligence sharing and coordination.</li>
<li>Manage and mentor the cybersecurity threat management team, fostering skill development and knowledge sharing.</li>
<li>Prepare and present threat intelligence reports and risk assessments to senior leadership and stakeholders.</li>
<li>Stay abreast of emerging threats, tactics, and technologies, integrating new knowledge into threat management processes.</li>
<li>Ensure compliance with relevant cybersecurity standards, policies, and regulations.</li><br>
</ul><br>
<br>
<b>Requirements</b><br>
<ul>
<li>Bachelor's degree in Cybersecurity, Information Technology, or a related field.</li>
<li>6+ years of experience in cybersecurity threat management, incident response, or related fields.</li>
<li>Deep understanding of threat intelligence frameworks, security operations, and incident response methodologies.</li>
<li>Proven leadership and team management experience.</li>
<li>Familiarity with advanced threat detection tools and technologies.</li>
<li>Excellent analytical, communication, and interpersonal skills.</li>
<li>Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Threat Intelligence Analyst (CTIA), or GIAC Certified Incident Handler (GCIH) are highly desirable.</li><br>
</ul><br>
<br>
<b>Benefits</b><p><br>
Comprehensive benefits package</p></div>

Manager - Cybersecurity Threat Management

The Home Depot

<div><p><b>Position Purpose:</b></p><p>
Protect what matters most to our associates and customers by leading offensive security capabilities across the enterprise. This role drives strategic and operational excellence across threat intelligence, investigations, and offensive security to proactively identify, assess, and mitigate advanced cyber threats.</p><p></p><p><b>
Key Responsibilities</b></p><ul><li>
Lead and scale Offensive Security functions within the Security Operations organization</li><li>
Oversee proactive and reactive investigations, including advanced threat analysis, incident response support, and adversary‑focused operations</li><li>
Drive offensive security strategies (e.g., threat‑informed testing, red‑team‑aligned activities) to strengthen detection and response capabilities</li><li>
Partner cross‑functionally to reduce mean time to detect, investigate, and contain security incidents</li><li>
Establish tactical and strategic roadmaps aligned to SOC and multi‑year cybersecurity objectives</li><li>
Mentor and develop high‑performing leaders and teams; serve as a subject‑matter expert in threat investigations and offensive security disciplines</li></ul><p></p><p><b>
Preferred Qualifications</b></p><ul><li>
Experience leading cyber threat investigations, threat intelligence, or offensive security teams</li><li>
Strong background in incident response, security operations, and adversary tradecraft</li><li>
Proven people leadership with experience managing multiple teams and senior‑level stakeholders</li><li>
Ability to translate threat insights into actionable, business‑relevant recommendations</li></ul><p><b>
Key Responsibilities:</b></p><ul><li>
100% Deliver Execution, Plans &amp; Aligns, Develop Others - Collaborate cross functionally to reduce vulnerabilities, risk and incident management; Drive cross-functional alignment; Asses, develop, implement and maintain strategies to assess and resolve security risk across the enterprise; Provide leadership, mentoring and coaching to direct reports and other leaders</li></ul><p><b><br>
Direct Manager/Direct Reports:</b></p><ul><li>
This position typically reports to Director or Sr. Director</li><li>
This position has 6-10 Direct Reports</li></ul><p><b><br>
Travel Requirements:</b></p><ul><li>
Typically requires overnight travel less than 10% of the time.</li></ul><p><b><br>
Physical Requirements:</b></p><ul><li>
Most of the time is spent sitting in a comfortable position and there is frequent opportunity to move about. On rare occasions there may be a need to move or lift light articles.</li></ul><p><b><br>
Working Conditions:</b></p><ul><li>
Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.</li></ul><p><b><br>
Minimum Qualifications:</b></p><ul><li>
Must be eighteen years of age or older.</li><li>
Must be legally permitted to work in the United States.</li></ul><p><b><br>
Preferred Qualifications:</b></p><ul><li>
4+ years of previous leadership experience</li></ul><p><b><br>
Minimum Education:</b></p><ul><li>
The knowledge, skills and abilities typically acquired through the completion of a bachelor's degree program or equivalent degree in a field of study related to the job.</li></ul><p><b><br>
Minimum Years of Work Experience:</b></p><ul><li>
8+</li></ul><p><b><br>
Competencies:</b></p><ul><li>
Decision Quality</li><li>
Ensures Accountability</li><li>
Plans and Aligns</li><li>
Develops Talent</li></ul></div><p></p>

Cybersecurity Senior Manager | Offensive Security (Remote)

DoorDash

<p></p><div><h2 class="jobSectionHeader"><b>About the Team</b></h2>
<p>
The Global Safety and Security team advances DoorDash through the protection of people, property, operations, brand, and reputation. We manage safety and security risk and provide value across the business through technology, and a people-first approach. Our team strives to always be in front and there for our people anytime, anywhere.</p>
<h2 class="jobSectionHeader"><b>
About the Role</b></h2>
<p>
The Physical Security Agent, Critical Incident Response Team (CIRT) is responsible for real-time monitoring, triage, and response to incidents that impact DoorDash's global workforce, assets, and operations. You'll serve as a front-line responder, analyzing alerts, coordinating response actions, and escalating issues according to established Global Safety &amp; Security (GSS) protocols.</p>
<p>
This role sits at the heart of DoorDash's emergency response network &mdash; ensuring rapid, informed, and coordinated action during critical events such as natural disasters, workplace emergencies, or significant disruptions. Working closely with regional and global partners, you'll help keep DoorDash's people safe and operations running smoothly around the clock.</p>
<h2 class="jobSectionHeader"><b>
You're excited about this opportunity because you will&hellip;</b></h2>
<h4 class="jobSectionHeader"><b>Security Operations &amp; Monitoring</b></h4>
<ul><li>Monitor and assess alerts from global intelligence, safety, and security systems to identify potential threats or incidents</li>
<li>Patrol and assess potential behavioral escalations or concerns</li>
<li>Conduct routine lobby and facility patrols to ensure safety, security, and compliance</li>
<li>Perform door, camera, and access point checks</li>
</ul><h4 class="jobSectionHeader"><b>Access Control &amp; Visitor Management</b></h4>
<ul><li>Manage employee and guest badging, including badge printing, activation, and access level assignments (experience with Genetec, Lenel S2, or similar systems)</li>
</ul><h4 class="jobSectionHeader"><b>Incident Response &amp; Safety</b></h4>
<ul><li>Triage incidents, determining severity and escalation requirements in accordance with CIRT standard operating procedures</li>
<li>Act as the initial point of contact for incident reporting, ensuring information is captured accurately and escalated efficiently</li>
<li>De-escalate situations involving employees, vendors, and guests as needed</li>
<li>Support activation and execution of emergency response and crisis communication protocols</li>
</ul><h4 class="jobSectionHeader"><b>Employee Engagement</b></h4>
<ul><li>Coordinate with internal teams (e.g., Workplace, HR, Legal, Comms, Operations) and external partners (e.g., law enforcement, emergency services) during incident response</li>
<li>Disseminate timely situational updates and intelligence to relevant stakeholders</li>
</ul><h4 class="jobSectionHeader"><b>Asset &amp; Inventory Management</b></h4>
<ul><li>Maintain inventory, readiness, and restocking of first aid kits, AEDs, and other emergency response materials in coordination with Workplace teams</li>
<li>Ensure emergency supplies are documented, tracked, and available to support incident response operations</li>
</ul><h4 class="jobSectionHeader"><b>Documentation, Compliance &amp; Technology</b></h4>
<ul><li>Maintain SOPs, post orders, incident reports, and audit records</li>
<li>Ensure adherence to corporate safety, security, and compliance standards</li>
<li>Maintain detailed logs, case notes, and documentation using Jira and other internal tools</li>
<li>Participate in after-action reviews to improve process and operational efficiency</li>
</ul><h4 class="jobSectionHeader"><b>Events Support</b></h4>
<ul><li>Support local events, executive visits, and executive protection details from an incident monitoring, coordination, and escalation perspective</li>
<li>Coordinate with Workplace, Security, and event stakeholders to ensure appropriate safety coverage and response readiness</li>
<li>Monitor events for emerging risks, incidents, or escalations and facilitate timely response as needed</li>
</ul><h4 class="jobSectionHeader"><b>Additional Duties</b></h4>
<ul><li>Support after-hours, weekend, and holiday response as required by business needs</li>
<li>Support special projects or operational needs as assigned</li>
<li>Assist with credentialing, crowd flow, and safety monitoring during higher-volume office days or events</li>
<li>Travel up to 5% as required for training or business support</li>
</ul><h4 class="jobSectionHeader"><b>Schedule &amp; Work Environment</b></h4>
<ul><li>On-site role, 40 hours per week</li>
<li>Schedule may vary based on operational needs</li>
<li>After-hours, weekends, and holidays as required by business needs</li>
</ul><h2 class="jobSectionHeader"><b>We're excited about you because&hellip;</b></h2>
<ul><li>2&ndash;4+ years of experience in emergency management, public safety, dispatch, GSOC, or related security operations environment</li>
<li>CPR, First Aid, AED certification (current)</li>
<li>Advanced First Aid training (EMT preferred)</li>
<li>Strong analytical and situational awareness skills &mdash; able to prioritize under pressure</li>
<li>Exceptional written and verbal communication, particularly in high-stakes or time-sensitive situations</li>
<li>Familiarity with incident management systems and communication tools (e.g., Everbridge, Dataminr, OnSolve, or similar)</li>
<li>Calm and composed in emergencies, with strong problem-solving and judgment skills</li>
<li>Willingness to work non-standard hours, including nights, weekends, and holidays</li>
<li>Fluency in English required; additional language skills (Spanish, French, or Mandarin) a plus</li>
<li>Bachelor's degree or equivalent work experience in a relevant field (e.g., emergency management, criminal justice, homeland security)</li>
<li>Great communication and relationship building skills</li>
</ul><h3 class="jobSectionHeader"><b>You'll Love This Role If</b></h3>
<ul><li>You thrive in high-tempo, real-time environments where every second matters</li>
<li>You find purpose in helping protect people and operations from emerging risks</li>
<li>You enjoy staying calm under pressure and making smart, quick decisions</li>
<li>You value teamwork, precision, and continuous improvement</li></ul><br>
<p></p>
<p>
Notice to Applicants for Jobs Located in NYC or Remote Jobs Associated With Office in NYC Only</p>
<p>
We use Covey as part of our hiring and/or promotional process for jobs in NYC and certain features may qualify it as an AEDT in NYC. As part of the hiring and/or promotion process, we provide Covey with job requirements and candidate submitted applications. We began using Covey Scout for Inbound from August 21, 2023, through December 21, 2023, and resumed using Covey Scout for Inbound again on June 29, 2024.</p>
<p>
The Covey tool has been reviewed by an independent auditor. Results of the audit may be viewed here: Covey</p><div><h2 class="jobSectionHeader"><b>
About DoorDash</b></h2>
<p>
At DoorDash, our mission to empower local economies shapes how our team members move quickly, learn, and reiterate in order to make impactful decisions that display empathy for our range of users&mdash;from Dashers to merchant partners to consumers. We are a technology and logistics company that started by enabling door-to-door delivery, and we are looking for team members who can help us go from a company that is known as the place you order food to a company that people turn to for any and all goods.<br>
<br>
DoorDash is growing rapidly and changing constantly, which gives our team members the opportunity to share their unique perspectives, solve new challenges, and own their careers. We're committed to supporting employees' happiness, healthiness, and overall well-being by providing comprehensive benefits and perks including premium healthcare, wellness expense reimbursement, paid parental leave and more.</p>
<h2 class="jobSectionHeader"><b>
Our Commitment to Diversity and Inclusion</b></h2>
<p>
We're committed to growing and empowering a more inclusive community within our company, industry, and cities. That's why we hire and cultivate diverse teams of people from all backgrounds, experiences, and perspectives. We believe that true innovation happens when everyone has room at the table and the tools, resources, and opportunity to excel.</p>
<p>
Statement of Non-Discrimination: In keeping with our beliefs and goals, no employee or applicant will face discrimination or harassment based on: race, color, ancestry, national origin, religion, age, gender, marital/domestic partner status, sexual orientation, gender identity or expression, disability status, or veteran status. Above and beyond discrimination and harassment based on &quot;protected categories,&quot; we also strive to prevent other subtler forms of inappropriate behavior (i.e., stereotyping) from ever gaining a foothold in our office. Whether blatant or hidden, barriers to success have no place at DoorDash. We value a diverse workforce &ndash; people who identify as women, non-binary or gender non-conforming, LGBTQIA+, American Indian or Native Alaskan, Black or African American, Hispanic or Latinx, Native Hawaiian or Other Pacific Islander, differently-abled, caretakers and parents, and veterans are strongly encouraged to apply. Thank you to the Level Playing Field Institute for this statement of non-discrimination.</p>
<p>
Pursuant to the San Francisco Fair Chance Ordinance, Los Angeles Fair Chance Initiative for Hiring Ordinance, and any other state or local hiring regulations, we will consider for employment any qualified applicant, including those with arrest and conviction records, in a manner consistent with the applicable regulation.</p>
<p><b>
If you need any accommodations, please inform your recruiting contact upon initial connection.</b></p></div></div>

Agent, Critical Incident Response Team - New York, NY

Marriott Vacations Worldwide

<div><ul><li><b>Relocation assistance provided</b></li></ul><p><b><br>
Job </b><b>Summary</b></p><p></p><p>
The <b>AVP, Cyber Security Operations</b> will be responsible for leading the design, implementation, and continuous enhancement of the organization&rsquo;s security operations capabilities. This role will focus on developing a Security Operations Center (SOC) that ensures proactive monitoring, threat detection, and swift incident response to safeguard the organization&rsquo;s critical infrastructure and digital assets. The individual will be tasked with establishing a robust threat intelligence program that integrates real-time threat data, analysis, and strategic insights to anticipate emerging risks and inform decision-making. A key aspect of this role is creating and nurturing operational processes that allow the SOC to function seamlessly across complex, hybrid environments, including cloud and on-premises systems.</p><p></p><p>
This leader will be responsible for managing advanced security tools such as SIEM, SOAR, EDR, and threat intelligence platforms, and will leverage these tools to automate workflows, improve incident response times, and drive threat analysis. The role will ensure that security operations are continuously evolving to meet the latest threat landscapes, using an intelligence-driven approach to preemptively mitigate risks. The individual will be instrumental in driving the organization&rsquo;s security incident management framework, ensuring effective resolution, reporting, and post-incident reviews that contribute to future risk mitigation.</p><p></p><p>
Additionally, the position collaborates closely with business and IT leaders to ensure that security operations are aligned with organizational goals and risk management strategies. This role will also involve working with regulatory and compliance teams to ensure adherence to industry standards, data protection regulations, and cybersecurity best practices.</p><p></p><p><b>
Expected </b><b>Contributions</b></p><p></p><ul><li><b>
SOC Leadership and Optimization: </b>Leads the continuous improvement and optimization of the Security Operations Center (SOC) to ensure that it is capable of effectively detecting and responding to both external and internal threats. This includes refining SOC processes, tools, and workflows to ensure operational efficiency and responsiveness to security incidents across hybrid environments.</li><li><b>
Threat Intelligence Integration:</b> Develops and operationalizes a comprehensive threat intelligence program that enhances situational awareness and empowers the SOC with actionable insights. This includes integrating external threat intelligence feeds, leveraging internal threat data, and fostering collaboration with industry groups and threat-sharing communities to stay ahead of emerging threats.</li><li><b>
Incident Response Management:</b> Oversees the development and execution of incident response plans, ensuring they are tested, documented, and continuously improved. Leads high-impact incident response efforts, coordinating with relevant stakeholders to contain, remediate, and recover from security incidents. Ensures post-incident reviews are conducted to identify gaps and improve the organization&rsquo;s overall security posture.</li><li><b>
Security Automation and Orchestration:</b> Spearheads the integration of automation and orchestration tools, such as Security Orchestration, Automation, and Response (SOAR) platforms, to streamline and accelerate security operations. Focuses on automating repetitive tasks, improving response times, and reducing manual effort to increase operational efficiency within the SOC.</li><li><b>
Security Metrics and Reporting:</b> Establishes key performance indicators (KPIs) and metrics to measure the effectiveness of the security operations function. Provides regular updates and executive reporting on security operations performance, including threat detection, incident response timelines, and overall security posture. Uses data to drive improvements and ensure alignment with the organization&rsquo;s risk management strategy.</li><li><b>
Cross-functional Collaboration:</b> Works closely with technology, legal, compliance, privacy, and business leadership to ensure that security operations are aligned with overall business objectives and regulatory requirements. Facilitates the integration of security considerations into all aspects of the organization&rsquo;s technology infrastructure and processes.</li><li><b>
Team Development and Mentorship:</b> Fosters a high-performance culture within the security operations team through mentorship, training, and leadership. Supports career development and skills growth for team members, ensuring they are equipped with the latest knowledge and tools to handle evolving threats. Builds a culture of continuous learning to keep the team ahead of the curve in security operations and threat management.</li><li><b>
Risk and Compliance Alignment:</b> Ensures that the security operations function meets relevant regulatory requirements and aligns with industry standards (e.g., NIST, ISO 27001, GDPR). Works with compliance and legal teams to ensure that incident response efforts, threat intelligence, and SOC activities support the organization&rsquo;s broader compliance goals.</li><li><b>
Technology and Tool Selection:</b> Evaluates, selects, and implements security technologies that support the security operations program. This includes SIEM, EDR, threat intelligence platforms, and other tools that enhance detection, monitoring, and response capabilities. Ensures these tools are integrated seamlessly into the organization&rsquo;s broader security architecture.</li></ul><p></p><p><b>
Candidate </b><b>Profile</b></p><p></p><p><b>
Education</b></p><ul><li>
Bachelor of Science (BS) degree that is technology based in information technology, engineering, computer science, or statistical/math sciences required.
</li><li>Master&rsquo;s degree, e.g., MBA or in Computer Science, preferred.</li></ul><p></p><p><b>
Certifications Preferred</b></p><ul><li>
Advanced certifications such as CISSP, CISM, GIAC (e.g., GCIA, GCFA, GCIH), or CEH preferred.</li></ul><p></p><p><b>
Experience</b></p><ul><li>
At least ten years of progressive experience in relevant Information Security positions.</li><li>
At least six years of experience in a security engineering role or a similar position or having equivalent skills and experience
</li><li>Proven experience managing hybrid SOCs (in-house and MSSPs), and leading global or enterprise-scale security operations.</li><li>
Demonstrated expertise with tools and technologies such as SIEM, SOAR, EDR, and threat intelligence platforms.</li><li>
Experience managing incidents and crises in dynamic environments.</li></ul><p></p><p><b>
Skills/Attributes</b></p><ul><li>
Deep understanding of incident response methodologies, threat detection, and forensics practices.</li><li>
Expertise in modern IT architectures, including hybrid cloud environments, containers, and APIs.</li><li>
Strong knowledge of security frameworks and standards (e.g., NIST CSF, MITRE ATT&amp;CK, ISO 27001).</li><li>
Exceptional analytical and critical thinking skills with the ability to make critical decisions under pressure.</li><li>
Strong leadership, collaboration, and interpersonal skills, with the ability to influence at all levels of the organization.</li><li>
Effective communicator with the ability to translate complex technical details into actionable insights for diverse audiences.</li><li>
Ability to develop and mentor security operations teams, fostering a culture of continuous learning, skill development, and high-performance standards to stay ahead of evolving threats.</li></ul><p></p><p>
Marriott Vacations Worldwide is an equal opportunity employer committed to hiring a diverse workforce and sustaining an inclusive culture.</p></div>

AVP, Cyber Security Operations*

Fashionphile

<div><div><div>FASHIONPHILE is more than just fashion &mdash; we&rsquo;re revolutionizing the ultra-luxury fashion experience in order to create a sustainable alternative that extends the life cycle of products and makes them more accessible to a diverse customer base. As we strive to become the world's most sought-after brand in luxury re-commerce, we know it's our team members who make it all happen! We value diversity in our people, perspectives, and products. For us, it's the only way to cultivate the creativity and innovation essential to achieving our mission and supporting our customers. We do this both in-person and through our digital omni-channel experiences. If you're someone who embraces change, is authentic, and wants to make an impact this is the place for you.</div><div><b><br>
About the Opportunity:</b></div><div></div><div>
FASHIONPHILE is looking for a Cybersecurity &amp; Privacy Lead to build, manage, audit and continuously improve the company&rsquo;s cybersecurity and privacy programs. This standalone security role is also accountable for incident response and vendor management to ensure compliance across privacy, security and contracts / renewals. Responsibilities include:</div><ul><li><div>
Building and managing the cybersecurity, risk and privacy programs, including strategy, governance, policies, risk register, track metrics, and execute a prioritized roadmap aligned to the company priorities.</div></li><li><div>
Auditing access management practices, privileged access, access reviews, asset management, configuration management and onboarding/offboarding processes</div></li><li><div>
Leading incident response, including playbooks, incident coordination, communications support, exercises, and post-incident improvement tracking</div></li><li><div>
Establishing and operating a data protection program for customer and company data, including data classification, secure handling and sharing requirements, and DLP strategy and monitoring for sensitive data movement.</div></li><li><div>
Building and running third-party risk management for critical vendors, including due diligence, contract security requirements, contract renewal reviews, and ongoing issue management and escalations</div></li></ul><div><b><br>
What We&rsquo;re Looking For:</b></div><div></div><ul><li><div>
Bachelor&rsquo;s Degree or equivalent and relevant experience</div></li><li><div>
8+ years cybersecurity experience spanning multiple domains</div></li><li><div>
Demonstrated experience owning security and privacy outcomes in a lean or standalone security role</div></li><li><div>
Demonstrated ability to build and operate a right-sized cybersecurity and data privacy program, including governance, policy development, risk assessment, remediation tracking, and executive reporting</div></li><li><div>
Demonstrated knowledge of privacy program fundamentals such as data mapping support, retention alignment, lawful processing considerations (in partnership with Legal), and responding to customer or partner assurance requests</div></li><li><div>
Strong working knowledge of identity and access management practices (single sign-on, multi-factor authentication, privileged access, access reviews, and timely deprovisioning)</div></li><li><div>
Proven leadership in managing incident response activities, including coordination with external partners (forensics, legal, cyber insurance, and service providers) and internal communications</div></li><li><div>
Ability to translate technical risk into business impact and drive cross-functional execution without direct authority</div></li><li><div>
Familiarity with commerce security and fraud-related risk</div></li><li><div>
Retail, e-commerce, marketplaces, payments, or consumer brands, including operating security, privacy, and compliance controls in a high-volume customer environment - Preferred</div></li><li><div>
Audit readiness and compliance evidence coordination experience (for example PCI-related coordination as applicable and customer assurance requests) - Preferred</div></li><li><div>
Certifications: CISSP, CISM, CCSP, or cloud security certifications (AWS or Azure), Privacy and compliance certifications a plus (CIPP/US, CIPM, or CRISC) and/or PMP<br>
</div></li></ul><br>
<div><b>What We Offer:</b></div><div></div><ul><li><div>
Medical, Dental and Vision Coverage</div></li><li><div>
FSA options for Medical, Dependent Care &amp; Commuter Benefits</div></li><li><div>
Paid Time off, Paid Sick Time, and Paid Holidays</div></li><li><div>
401(k) with generous match program</div></li><li><div>
Free Life Insurance and AD&amp;D</div></li><li><div>
Long Term Disability Insurance</div></li><li><div>
Employee Discount</div></li></ul></div><div></div><div><b>
Compensation:</b><div><ul><li><b>
Pay Scale: </b>FASHIONPHILE reasonably expects the range to be $140,000-$160,000 for this position in our Downtown LA Office (Or San Diego Office) and offers an Annual Bonus Opportunity aligned to our Lead Level. Offered compensation will vary based on (a) location; (b) individual candidate qualifications; and (c) individual candidate experience. This post may be updated as new market data becomes available and is accurate as of the date of this posting. FASHIONPHILE reserves the right to modify this information at any time, subject to applicable law.</li></ul></div>
FASHIONPHILE Group LLC is proud to be an equal-opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application and/or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation at HR@fashionphile.com.</div></div>

Cybersecurity & Privacy Program Lead

Search 10000+ Incident response manager jobs near you this May. New roles added regularly across leading industries. Apply today.