incident response manager

ACWA Power

<div>
 
 The Incident Response &amp; Forensics Manager (IT &amp; OT) is responsible for managing and leading the organization's incident response and forensic investigation efforts across both Information Technology (IT) and Operational Technology (OT) environments. This role ensures that security incidents are promptly detected, contained, investigated, and remediated, while also overseeing the collection and analysis of forensic evidence. The manager coordinates across multiple teams to enhance the organization&rsquo;s ability to respond to cyber incidents, minimize damage, and prevent future security breaches within both IT and OT domains.
 
 
 
 
 
 
 KEY ACCOUNTABILITIES:
 
 
 
 
 
 
 
 Incident Response Management (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Lead and manage the organization's incident response efforts across both IT and OT systems, ensuring rapid detection, containment, and resolution of security incidents.
 </li>
 <li>
 Develop and maintain incident response playbooks, ensuring that they address specific threats to both IT and OT environments.
 </li>
 <li>
 Coordinate with internal teams and external stakeholders to ensure effective communication and collaboration during incident response efforts.
 </li>
 <li>
 Oversee the triage, prioritization, and escalation of security incidents, ensuring that critical threats are addressed in a timely manner.
 </li>
 <li>
 Provide incident response support to both IT and OT infrastructure teams, advising on containment actions and recovery steps.
 </li>
 <li>
 Offer remediation guidance including configuration changes and preventive measures to minimize future threats in both IT and OT systems.
 </li>
 <li>
 Triage alerts from detection platforms, identifying and removing false positives across IT and OT environments.
 </li>
 <li>
 Escalate genuine threats and security incidents to the appropriate teams for further investigation and remediation, ensuring timely and accurate response to both IT-based and OT-based threats.
 </li>
 </ul>
 
 
 
 
 
 Forensic Investigation (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Lead digital forensic investigations within both IT and OT systems to determine the root cause of security incidents, ensuring the proper collection, preservation, and analysis of digital evidence.
 </li>
 <li>
 Utilize forensic tools and techniques to investigate compromised systems, networks, and devices across IT and OT infrastructures.
 </li>
 <li>
 Ensure that forensic processes adhere to legal and regulatory requirements, and that evidence is documented in a formal and defensible manner for potential legal proceedings.
 </li>
 </ul>
 
 
 
 
 
 Threat Detection &amp; Analysis (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Conduct continuous monitoring of security events across both IT and OT environments using SIEM, XDR, and other Threat Detection, Investigation, and Response (TDIR) platforms.
 </li>
 <li>
 Analyze telemetry from multiple sources (network traffic, endpoints, OT systems, etc.) to detect and investigate potential cyber threats, ensuring comprehensive coverage across both digital and physical systems.
 </li>
 <li>
 Monitor and analyze security events from various sources&mdash;including SIEM, intrusion detection/prevention systems (IDS/IPS), firewalls, endpoint detection systems, and OT-specific monitoring tools&mdash;to identify potential threats and vulnerabilities.
 </li>
 <li>
 Lead efforts to correlate security information from both IT and OT environments to identify patterns of anomalous behavior and mitigate potential threats.
 </li>
 </ul>
 
 
 
 
 
 Incident Reporting &amp; Documentation:
 
 
 
 
 
 <ul>
 <li>
 Document formal technical incident reports for consumption by IT and OT infrastructure teams and senior leadership, providing detailed information on root causes, affected systems, and next steps.
 </li>
 <li>
 Ensure clear and concise communication of incident details to both IT and OT stakeholders, enabling effective decision-making during and after incidents.
 </li>
 <li>
 Ensure accurate and detailed documentation of all security incidents, including timelines, actions taken, and outcomes, for post-incident reviews and compliance reporting.
 </li>
 <li>
 Prepare formal incident reports and technical summaries for senior management, internal stakeholders, and regulatory authorities as required.
 </li>
 <li>
 Conduct post-incident reviews and lessons learned sessions to identify opportunities for improvement in incident response procedures for both IT and OT environments.
 </li>
 </ul>
 
 
 
 
 
 Collaboration &amp; Coordination:
 
 
 
 
 
 <ul>
 <li>
 Work closely with threat hunting teams to optimize TDIR capabilities by incorporating findings from threat hunting activities in both IT and OT environments.
 </li>
 <li>
 Continuously improve detection and response strategies based on real-world threat activity affecting both IT networks and OT systems.
 </li>
 <li>
 Collaborate with IT engineering, OT operations, cybersecurity teams, and third-party vendors to coordinate response efforts and ensure that both IT and OT systems are fully protected during and after an incident.
 </li>
 <li>
 Work closely with threat intelligence teams to stay updated on emerging threats to both IT and OT systems and ensure that the organization&rsquo;s incident response strategy remains current and effective.
 </li>
 <li>
 Provide incident response support to both IT and OT infrastructure teams, advising on containment actions and recovery steps.
 </li>
 <li>
 Offer remediation guidance including configuration changes and preventive measures to minimize future threats in both IT and OT systems.
 </li>
 </ul>
 
 
 
 
 
 Incident Response Training &amp; Drills:
 
 
 
 
 
 <ul>
 <li>
 Develop and conduct regular incident response simulations and training exercises across both IT and OT teams to ensure readiness for real-world cyber incidents.
 </li>
 <li>
 Ensure that all relevant personnel are trained in their roles during an incident and are familiar with the incident response plan for both IT and OT systems.
 </li>
 </ul>
 
 
 
 
 
 Detection Platform Enhancement (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Work with threat detection content development teams to fine-tune detection platforms and create new detection rules tailored to the unique needs of both IT and OT environments.
 </li>
 <li>
 Continuously enhance detection capabilities to improve alert accuracy and reduce false positives in both IT systems (e.g., endpoints, networks) and OT systems (e.g., SCADA, ICS).
 </li>
 </ul>
 
 
 
 
 
 Root Cause Analysis &amp; Prevention (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Conduct in-depth root cause analysis of security incidents across IT and OT systems, identifying vulnerabilities, misconfigurations, or other weaknesses.
 </li>
 <li>
 Provide recommendations for mitigating future risks, including configuration changes and security controls for both IT infrastructure and OT control systems.
 </li>
 </ul>
 
 
 
 
 
 Policy Development &amp; Incident Response Governance
 
 :
 
 
 
 
 <ul>
 <li>
 Assist in the development and refinement of incident response policies, forensic procedures, and security standards for both IT and OT environments.
 </li>
 <li>
 Ensure that incident response efforts comply with relevant regulatory requirements and industry best practices for both IT and OT sectors.
 </li>
 </ul>
 
 
 
 
 
 compliance &amp; Performance Reporting (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Support the development and execution of compliance reporting for both IT and OT teams, ensuring that security incidents and responses are documented in line with organizational and regulatory requirements.
 </li>
 <li>
 Provide SOC performance reporting to ensure key metrics and Service Level Agreements (SLAs) are met for both IT and OT operations.
 </li>
 </ul>
 
 
 
 
 
 Vulnerability &amp; Exposure Analysis (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Conduct analysis and testing to identify vulnerabilities, misconfigurations, and other exposures across both IT and OT environments.
 </li>
 <li>
 Validate user policies, configurations, and access controls to ensure they align with the security posture of both IT and OT systems, maintaining a holistic security approach.
 </li>
 <li>
 Efficiency &amp; SLA Adherence (IT &amp; OT):
 </li>
 <li>
 Work efficiently to meet SOC metrics and SLAs, ensuring timely and effective response to incidents affecting both IT infrastructure and OT control systems.
 </li>
 </ul>
 
 
 
 
 
 QUALIFICATIONS:
 
 
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or a related field (Master's preferred).
 </li>
 <li>
 5+ years of experience in incident response, digital forensics, or cybersecurity operations, with at least 2 years focusing on OT environments.
 </li>
 <li>
 Proficiency in incident response tools, forensic tools, and SIEM platforms (e.g., Splunk, ELK, QRadar).
 </li>
 <li>
 Experience with both IT and OT-specific security platforms (e.g., SCADA, ICS, PLC systems).
 </li>
 <li>
 Knowledge of forensic analysis techniques across networks, endpoints, and OT systems.
 </li>
 <li>
 Familiarity with threat intelligence, malware analysis, and vulnerability management for both IT and OT infrastructures.
 </li>
 </ul>
 
 
</div>

Incident Response & Forensics Manager (IT & OT)

<div>
 
 The Cyber Operations and Threat &amp; Vulnerability Manager (IT &amp; OT) is responsible for overseeing cybersecurity operations, threat detection, vulnerability management, and risk mitigation across both Information Technology (IT) and Operational Technology (OT) environments. This role ensures the organization&rsquo;s IT and OT infrastructures are protected from evolving cyber threats, vulnerabilities, and risks. The manager leads efforts to detect, assess, and remediate security weaknesses while coordinating responses to mitigate potential impacts on both digital and physical systems. This role is critical in ensuring the security posture of the entire organization, encompassing both traditional IT systems and specialized OT environments such as Industrial Control Systems (ICS) and SCADA.
 
 
 
 
 
 
 KEY ACCOUNTABILITIES:
 
 
 
 
 
 
 
 Cyber Operations Oversight (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Manage and oversee daily cyber operations across both IT and OT environments, ensuring consistent security monitoring, incident response, and threat detection.
 </li>
 <li>
 Lead the Security Operations Center (SOC) to monitor and respond to cyber threats in real-time, ensuring a unified approach for both IT and OT infrastructures.
 </li>
 <li>
 Implement and enforce security policies, procedures, and controls tailored to the specific needs of both IT and OT systems, ensuring alignment with industry best practices and regulatory requirements.
 </li>
 </ul>
 
 
 
 
 
 Threat Detection &amp; Response (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Oversee threat detection and response efforts across the organization using SIEM, XDR, and other specialized security tools for both IT and OT environments.
 </li>
 <li>
 Develop and implement incident response playbooks, ensuring they address potential threats to both IT systems (e.g., networks, servers, endpoints) and OT systems (e.g., SCADA, ICS, PLCs).
 </li>
 <li>
 Work closely with threat intelligence teams to stay updated on emerging threats, vulnerabilities, and attack vectors targeting both IT and OT infrastructures.
 </li>
 </ul>
 
 
 
 
 
 Threat Detection &amp; Response (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Oversee threat detection and response efforts across the organization using SIEM, XDR, and other specialized security tools for both IT and OT environments.
 </li>
 <li>
 Develop and implement incident response playbooks, ensuring they address potential threats to both IT systems (e.g., networks, servers, endpoints) and OT systems (e.g., SCADA, ICS, PLCs).
 </li>
 <li>
 Work closely with threat intelligence teams to stay updated on emerging threats, vulnerabilities, and attack vectors targeting both IT and OT infrastructures.
 </li>
 </ul>
 
 
 
 
 
 Threat Detection &amp; Response (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Oversee threat detection and response efforts across the organization using SIEM, XDR, and other specialized security tools for both IT and OT environments.
 </li>
 <li>
 Develop and implement incident response playbooks, ensuring they address potential threats to both IT systems (e.g., networks, servers, endpoints) and OT systems (e.g., SCADA, ICS, PLCs).
 </li>
 <li>
 Work closely with threat intelligence teams to stay updated on emerging threats, vulnerabilities, and attack vectors targeting both IT and OT infrastructures.
 </li>
 </ul>
 
 
 
 
 
 Security Engineering &amp; Hardening (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Work with IT and OT engineering teams to implement security best practices during the design, development, and deployment of new systems.
 </li>
 <li>
 Ensure that all IT and OT systems are hardened against known vulnerabilities and emerging attack vectors by applying patches, configurations, and security controls
 </li>
 </ul>
 
 
 
 
 
 Incident Response &amp; Coordination (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Lead the organization&rsquo;s incident response efforts across IT and OT systems, ensuring rapid identification, containment, and remediation of security incidents.
 </li>
 <li>
 Coordinate cross-functional teams, including IT, OT, forensics, and legal, to ensure a cohesive response to major incidents affecting both environments.
 </li>
 <li>
 Perform post-incident analysis and root cause investigations to identify gaps in security controls and improve future incident response capabilities.
 </li>
 </ul>
 
 
 
 
 
 Security Monitoring &amp; Optimization (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Continuously monitor the effectiveness of security tools and processes across IT and OT environments, ensuring timely detection and response to potential threats.
 </li>
 <li>
 Work with the threat detection and threat hunting teams to optimize security monitoring tools and improve alert accuracy for both IT and OT systems.
 </li>
 <li>
 Leverage insights from threat intelligence and threat hunting activities to enhance proactive threat detection and response capabilities.
 </li>
 </ul>
 
 
 
 
 
 Collaboration with Cross-Functional Teams:
 
 
 
 
 
 <ul>
 <li>
 Collaborate with IT, OT, and business stakeholders to ensure security operations align with organizational goals and risk management strategies.
 </li>
 <li>
 Work closely with compliance teams to ensure that both IT and OT environments meet regulatory requirements such as NCA, NIST, ISO 27001, NERC-CIP, and ISA/IEC 62443.
 </li>
 </ul>
 
 
 
 
 
 Collaboration with Cross-Functional Teams:
 
 
 
 
 
 <ul>
 <li>
 Collaborate with IT, OT, and business stakeholders to ensure security operations align with organizational goals and risk management strategies.
 </li>
 <li>
 Work closely with compliance teams to ensure that both IT and OT environments meet regulatory requirements such as NIST, ISO 27001, NERC-CIP, and ISA/IEC 62443.
 </li>
 </ul>
 
 
 
 
 
 Security Awareness &amp; Training (IT &amp; OT):
 
 
 
 
 
 <ul>
 <li>
 Develop and implement security awareness programs tailored to both IT and OT personnel, ensuring employees understand potential threats and the importance of following security policies.
 </li>
 <li>
 Conduct training sessions for IT and OT teams on incident response, vulnerability management, and secure system configurations
 </li>
 </ul>
 
 
 
 
 
 QUALIFICATIONS :
 
 
 
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field (master&rsquo;s degree preferred).
 </li>
 <li>
 6+ years of experience in cybersecurity operations, incident response, or vulnerability management, with experience in OT environments such as ICS/SCADA.
 </li>
 <li>
 Experience managing cybersecurity programs that span both IT and OT environments.
 </li>
 <li>
 Proficiency in SIEM platforms, XDR, and other monitoring tools for both IT and OT infrastructures.
 </li>
 <li>
 Strong hands-on experience with vulnerability management tools (e.g., Tenable, Qualys, Nessus, OT-specific platforms).
 </li>
 <li>
 Deep understanding of IT security controls as well as OT-specific controls for ICS, SCADA, and PLC systems.
 </li>
 <li>
 Knowledge of threat intelligence, incident response, and forensics in both IT and OT environments.
 </li>
 </ul>
 
 
</div>

Cyber Operations and Threat & Vulnerability Manager (IT & OT)

Accenture

<div><h2 class="jobSectionHeader">About Accenture</h2><div><div><div><div><div><div><div><div><div>
Accenture is a leading global professional services company that helps the world&rsquo;s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services&mdash;creating tangible value at speed and scale. We are a talent and innovation-led company serving clients in more than 120 countries.
Join Our Security Team
Join us in shaping the future of security solutions! You will have the opportunity to be a subject matter expert, collaborating with various teams to make impactful decisions. You will engage with multiple teams and contribute to key decisions while providing innovative solutions to challenges that arise. Your expertise in Security Incident Response will be invaluable as we work together to create a safer digital environment. We are excited to see how your contributions will help us thrive!<h2 class="jobSectionHeader">
Key Responsibilities</h2><ul><li>
Design and implement security solutions that enhance organizational security posture.</li><li>
Govern the use of enterprise security tools and frameworks to ensure compliance and effectiveness.</li><li>
Build and maintain Security Operations Centers (SOC) to proactively detect and respond to cyber threats.</li><li>
Collaborate with cross-functional teams to align security strategies with business objectives.</li></ul></div></div></div></div></div></div></div></div></div></div>
 
<div><h2 class="jobSectionHeader">Requirements</h2><ul><li>
Advanced proficiency in Security Incident Response.</li><li>
Minimum 4 years of experience in relevant security-related roles.</li><li>
Bachelor&rsquo;s Degree in a relevant field of study.</li></ul><h2 class="jobSectionHeader">
Bonus Points If You Have:</h2><ul><li>
Intermediate proficiency in Cybersecurity Frameworks.</li><li>
Advanced proficiency in Risk Management.</li><li>
Expert proficiency in Incident Management.</li><li>
Intermediate proficiency in Threat Intelligence.</li><li>
Master proficiency in Vulnerability Assessment.</li></ul></div>

SOC L2 Analyst – Security Transformation

Shield

<div><h3 class="jobSectionHeader">Description</h3><div> 
IronOrbit is seeking an Incident and Problem Manager to be part of our Managed Services customer support team, ensuring rapid incident resolution, effective problem management, and clear communication with internal stakeholders and customers. This role is part of the overall Support Operations and the Manager will be responsible for ensuring exceptional service continuity and superior customer satidfaction, while driving continual improvement. 
</div><div>The Incident and Problem Manager will coordinate very closely with Senior Service Manager and Customer Success Manager teams, managing escalations, resolving Problems, addressing service impacts and providing clear ownership of the Root Cause Analysis and proactive remediation across customer systems.</div> 
<h3 class="jobSectionHeader">
Key Responsibilities</h3> 
<ul>
<li>
Lead, mentor, and inspire a geographically distributed Incident and Problem Management team, fostering accountability, quality, and a positive, collaborative environment.</li>
<li>Demonstrate strong leadership in remote team settings: set clear expectations, facilitate regular virtual check-ins, and promote knowledge sharing across locations and time zones.</li>
<li>Oversee the end-to-end incident lifecycle: monitor ticket queues, triage incidents, coordinate escalations, and ensure timely resolution in line with SLAs.</li>
<li>Manage the problem management process: identify recurring issues, facilitate root cause analysis, and drive implementation of permanent solutions.</li>
<li>Serve as the senior escalation point for complex technical and client-impacting incidents during assigned shifts.</li>
<li>Coordinate change requests and scheduled maintenance activities with after-hours teams to minimize client disruption.</li>
<li>Develop, track, analyze and publish incident and problem metrics, prepare shift reports, and communicate critical updates to daytime leadership and the Senior Service Manager.</li>
<li>Collaborate with other managers and after-hours teams to ensure seamless handoffs and knowledge transfer between shifts and global teams.</li>
<li>Champion continuous improvement in incident and problem management processes, documentation, and client satisfaction.</li></ul><div></div><h3 class="jobSectionHeader"> 
Skills, Knowledge &amp; Expertise</h3> 
<ul>
<li>
3+ years in an IT support or service management leadership role (MSP experience highly preferred).</li>
<li>Demonstrated success leading remote and distributed teams, including setting goals, providing feedback, and driving engagement in virtual environments.</li>
<li>Strong technical background in Windows Server (2016/2019/2022), networking (Cisco, Sophos, SonicWall), cloud platforms (Microsoft 365, Google Workspace, Azure AD), and remote troubleshooting.</li>
<li>Proven ability to lead distributed/remote teams effectively.</li>
<li>Excellent written and verbal communication skills, with an emphasis on clarity and inclusivity in virtual settings.</li>
<li>Experience with ITSM tools and incident/problem management processes.</li>
<li>Experience with endpoint and device management tools (Microsoft Intune, Datto RMM, CrowdStrike Falcon, JAMF Pro, Apple Business Manager).</li>
<li>Familiarity with virtualization and VDI platforms (VMware Horizon, Citrix, Hyper-V).</li>
<li>Ability to coordinate effectively with after-hours and overnight teams.</li>
</ul><div>Preferred:</div><ul>
<li>ITIL certification or equivalent process knowledge.</li>
<li>Experience managing cross-time-zone teams and facilitating virtual collaboration.</li>
<li>Familiarity with MSP performance metrics, SLA reporting, and continual service improvement.</li>
<li>Knowledge of compliance frameworks (ISO 27001, PCI, SOC2).</li>
<li>Experience with backup/recovery (Veeam), MFA (Duo, Microsoft), and security monitoring (NIDS, DLP).</li></ul><div></div><h3 class="jobSectionHeader"> 
About IronOrbit</h3><div>
At IronOrbit, we're more than just a technology company - we're a fully integrated Information &amp; Communications Technology partner. As a Specialized Cloud Services Leader, we're dedicated to helping businesses across major industries and verticals plan, deploy, and fuel their digital transformations. 
 
IronOrbit is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. IronOrbit is committed to a diverse and inclusive workplace.</div></div>

Incident and Problem Manager

KPK SECURITY LTD

Control Room Manager / Control Room SupervisorLocation: Remote Shift Pattern: 6 days/nights &ndash; 10-hour shifts (including nights and weekends)Role OverviewThe Control Room Manager acts as the central hub of security operations, overseeing control room staff and on-site security officers while ensuring effective monitoring, compliance, and rapid incident response. This role is critical as the first line of response to security threats, ensuring seamless communication and operational efficiency across all sites.Key ResponsibilitiesTeam Management &amp; Leadership<ul><li>Manage, supervise, and lead a team of control room operators and security officers.</li><li>Handle staffing, shift rostering, attendance, and performance management using systems such as C24/7.</li><li>Chase officers to confirm availability for upcoming shifts and ensure full coverage.</li><li>Oversee training, staff motivation, development, and disciplinary procedures when required.</li><li>Ensure adherence to company policies, procedures, and operational protocols.</li></ul>Operational Oversight &amp; Officer Monitoring<ul><li>Ensure the control room operates as the central monitoring point for alarms, access control systems, and intruder detection.</li><li>Monitor live security operations and alarm activations.</li><li>Conduct hourly welfare and check calls to confirm officers are alert and carrying out assigned duties.</li><li>Verify officer attendance, on-site presence, and standards of uniform and presentation.</li><li>Review time-stamped images and patrol submissions to confirm task completion and correct positioning.</li><li>Act as a central point for data handling while maintaining GDPR and data protection compliance.</li></ul>Incident Response &amp; Coordination<ul><li>Lead and coordinate responses to incidents, emergencies, and major security events (e.g., intrusions, fire alarms).</li><li>Escalate and report critical incidents promptly to senior management or site incident managers.</li></ul>Compliance &amp; Administration<ul><li>Ensure compliance with statutory, contractual, SIA, and company requirements.</li><li>Maintain accurate records including incident reports, site logs, key issue registers, and lost property records.</li><li>Liaise regularly with management to provide operational feedback and suggest service improvements.</li><li>Support risk assessments, emergency planning, and coordination with other departments or sites.</li></ul>Working Environment<ul><li>Control room&ndash;based role working remotely</li><li>Shift-based position including nights and weekends</li><li>Fast-paced environment requiring attention to detail, strong communication, and calm decision-making</li></ul>Job Types: Full-time, Contract, Fresher Contract length: 12 monthsPay: Rs70,000.00 - Rs75,000.00 per monthWork Location: Remote

Control Room Manager / Control Room Supervisor

ASMGi

<div><div>ASMGi - Cyber Incident Response Analyst</div>
<div>General Summary:</div>
<div>As a key member of ASMGi&rsquo;s Information Security Incident Response Team this individual will be responsible for various parts of the incident response process - detection, validation, containment, remediation, and communication - for IT based security events and incidents impacting ASMGi&rsquo;s clients.</div>
<div>This individual will be responsible for the rapid response and resolution of security incidents including the ASMGi MDR / MSOC plus client&rsquo;s environments. This will involve coordinating with teams including Legal, Security Operations and Forensics experts, internal or external, to identify root cause, restore services and communicate status to affected stakeholders.</div>
<div>This role will act as the escalation path for the ASMGi Operations Team to validate findings and identify scope of events and support during larger investigations. This individual will act as an internal and client facing resource while interacting with the third-party Security Operations Center as applicable.</div>
<div>Principal Accountabilities:</div>
<div>25% - Client Incident Response Onboarding and Program Development.</div>
<ul><li>Work with ASMGi MDR / MSOC plus Service clients as part of the overall service and specifically the Incident Response Program Development including Incident Response Policy, Incident Response Plan, and Incident Response Playbook development and adoption.</li>
<li>Conduct client Tabletop Exercises on an annual basis based on the adopted Incident Response Playbook as part of the ASMGi MDR / MSOC plus Incident Response Service.</li>
</ul><div>50% - Incident Response</div>
<ul><li>Perform Level 2 and Level 3 computer security incident response activities including coordinating with the Security Operations Center and Forensics experts, internal and external.</li>
<li>Analyze, track and triage anomalies that have been escalated to ensure appropriate identification of risk to ASMGi MDR / MSOC plus clients.</li>
<li>Oversee the forensic analysis of cybersecurity incidents impacting ASMGi MDR / MSOC plus clients.</li>
<li>Understand and research emerging threats and current trends that may impact customers along with mitigation/resolutions for such threats.</li>
<li>Communicate and coordinate response efforts including working with ASMGi MDR / MSOC plus client&rsquo;s I.T., Business Leaders, and Third Parties to mitigate the impact of the risk and provide a lead role as part of the ASMGi Computer Security Incident Response Team (CSIRT).</li>
<li>Prepare incident reports of analysis and methodology and results of investigation to be submitted to ASMGi MDR / MSOC plus clients.</li>
</ul><div>25% - Assist with Incident Management Strategy Development, Consulting and Management of Third-Party Security Operations Center.</div>
<ul><li>Leverage lessons learned, threat modeling and emerging industry better practice, to analyze the effectiveness of the existing program (policies, technology, and awareness) to continuously improve the Incident Management Program.</li>
<li>Review industry frameworks, emerging threats, and best practice to advance the ASMGi MDR / MSOC plus Service.</li>
<li>Partner with ASMGi partners and internal groups to improve the ASMGi MDR / MSOC plus service and capabilities.</li>
<li>Assist with management of third-party business relationships for the security operations center and service levels. Identify potential gaps including procedures needed to mitigate risk and assist with appropriate solutions.</li>
</ul><div>Job Complexity</div>
<ul><li>Appropriately balances security risk and business impact to ensure that ASMGi&rsquo;s use of detection/response controls are effective.</li>
<li>Ability to build operational processes using industry best-practice that are tailored to the ASMGi MDR / MSOC plus client&rsquo;s organization, system, and processes.</li>
<li>Ability to effectively communicate risk including corrective action plans/recommendations to non-technical audiences including the ASMGi MDR / MSOC plus client&rsquo;s Executives and the Board of Directors leveraging the MDR / MSOC plus service.</li>
<li>Ability to create effective reports and presentations tailored to different audiences to ensure transparency and understanding of the ASMGi MDR / MSOC plus Service.</li>
<li>Assist with development of MDR / MSOC plus Service roadmap.</li>
</ul><div>Job Specifications 
Minimum education required: Bachelor's Degree Required</div>
<div>Education desired: Bachelor of Science 
Years of relevant experience: 7 &ndash; 10 +</div>
<div>Knowledge, skills, and abilities required:</div>
<ul><li>High level of technical expertise in information security, including deep familiarity with relevant penetration and intrusion techniques and attack vectors.</li>
<li>Cybersecurity in large complex companies including knowledge of security and privacy breach laws and regulatory reporting.</li>
<li>Proven experience working with Security Operations Center services, forensics firms.</li>
<li>Demonstrated ability to lead and develop cohesive and collaborative management and operational teams internally and with a third-party.</li>
<li>Proven experience implementing policies, procedures, and technology to detect and recover from a cybersecurity attack.</li>
<li>Ability to demonstrate strong computer knowledge networks, desktops, servers, cloud, and software as a service technology.</li>
<li>Expertise with next generation firewalls, Endpoint Detection and Response, Microsoft Advanced Threat Protection, Azure, and Office 365, Zero Day Threat Detection Technology, Threat Intelligence Feeds, Forensics, Data Loss Prevention Software, Web Proxies, Web Application Firewalls.</li>
<li>Strong problem-solving and trouble-shooting skills.</li>
<li>Strong communication skills including writing reports and presenting to senior executives.</li>
<li>Demonstrated connections to external Incident Response leaders and learning organizations.</li>
</ul><div>Working Conditions</div>
<ul><li>Normal corporate office environment and remote / virtual based on COVID-19.</li>
<li>On call work is required.</li></ul></div>

Cyber Incident Response Analyst

اورنچ مصر

<div>About the job Operations Senior Manager
<div>Purpose of the job

The Operations Manager will be responsible for overseeing the day-to-day operations of mega data center, ensuring seamless management of Data Center cloud, infrastructure, network and network security, Security Operations Center (SOC), and IT Service Management (ITSM) functions. This role demands a highly experienced professional with a minimum of 10 years of proven expertise in managing complex IT operations, ensuring high availability, robust security, and operational efficiency.
The Operations Manager will lead a diverse team of skilled engineers, driving continuous improvement, maintaining a proactive on issue resolution, and ensuring seamless operations service delivery across all domains.

Duties and responsibilities

Operational Leadership:
<ul><li>Direct and oversee the day-to-day operations of the data center, cloud infrastructure, Network and Network security, SOC, and ITSM, ensuring adherence to stringent SLAs and KPIs.</li></ul>
<ul><li>Develop, implement, and refine operational Process and best practices to optimize performance and efficiency across all domains.</li></ul>
<ul><li>Provide strong leadership and mentorship to a large team of operations engineers and specialists, fostering a collaborative and high-performance culture.</li></ul>
<ul><li>Manage incident response, problem management, and change management processes with a focus on minimizing service disruptions and ensuring rapid resolution.</li></ul>

IT Service Management (ITSM) Management:
<ul><li>Ensure effective implementation and management of ITSM processes, including incident management, problem management, change management, and service request management.</li></ul>
<ul><li>Utilize ITSM tools (e.g., BMC, OpenText) to track and manage service delivery.</li></ul>
<ul><li>Develop and maintain service level agreements (SLAs) .</li></ul>
<ul><li>Generate and analyze reports on ITSM metrics to identify areas for improvement.</li></ul>

Network Security Management:
<ul><li>Oversee the management and maintenance of network security infrastructure, including firewalls, intrusion detection/prevention systems (IDS/IPS), VPNs, and other security devices.</li></ul>
<ul><li>Ensure network security policies and procedures are implemented and enforced.</li></ul>
<ul><li>Managing the SOC team, ensuring timely detection and response to security incidents.</li></ul>
<ul><li>Manage security information and event management (SIEM) systems, threat intelligence platforms, and other security tools.</li></ul>
<ul><li>Conduct regular security assessments, vulnerability scans, and penetration testing.</li></ul>
<ul><li>Lead incident response.</li></ul>

Cloud Services Management:
<ul><li>Manage cloud and infrastructure and services, ensuring seamless integration with other systems.
</li></ul><ul><li>Ensure compliance with cloud security policies and industry standards.
</li></ul><ul><li>Work closely with vendors and third-party providers to manage cloud and infrastructure services.</li></ul>

Team Leadership &amp; Management:
<ul><li>Lead, mentor, and manage a multidisciplinary operations team, including cloud engineers, network security specialists, SOC analysts, and ITSM professionals.
</li></ul><ul><li>Enhance a culture of collaboration, accountability, and continuous improvement within the team.
</li></ul><ul><li>Conduct regular performance reviews, set objectives, and provide professional development opportunities for team members.</li></ul>

Risk Management &amp; Compliance:
<ul><li>Identify and mitigate operational and security risks, ensuring business continuity and disaster recovery.</li></ul>
<ul><li>Ensure compliance with relevant industry standards and regulations .</li></ul>
<ul><li>Conduct regular audits and assessments to ensure compliance.</li></ul>

Job specification

Education

<ul><li>Bachelors degree in Engineering, Computer Science, Information Technology, or a related field (or equivalent experience).</li></ul>

Experience.
<ul><li>
1. Minimum 10 years of experience in ICT operations, with at least 5 years in a leadership role.</li><li>
Proven experience in managing large-scale data center operations, cloud platforms and network security.
</li><li>Strong knowledge of SOC operations, ITSM frameworks (ITIL), and infrastructure management.
</li><li>Familiarity with cybersecurity best practices, compliance standards, and incident response protocols.</li><li>
leadership and team management skills, with the ability to inspire and motivate a diverse team.
</li><li>Strong problem-solving, decision-making, and conflict-resolution abilities.
</li><li>Excellent verbal and written communication skills, with the ability to interact effectively with technical and non-technical stakeholders.</li></ul>

Skills and abilities

<ul><li>Leadership and Team Management</li>
<li>Data Center Management</li>
<li>Cloud Computing
</li><li>Network Security (Firewalls, IDS/IPS, VPNs)</li>
<li>Cybersecurity and SOC Operations</li>
<li>IT Service Management (ITSM)</li>
<li>Incident Response and Problem Management</li>
<li>Risk Management and Compliance</li>
<li>Communication and Interpersonal Skills</li>
<li>Strong Analytical Skills</li></ul></div></div>

Operations Senior Manager

Search 10000+ Incident response manager jobs near you this January. New roles added regularly across leading industries. Apply today.