The posting
Functional overview
• You will be leading Security Platform team of Security Analyst to develop and enhance Threat Hunting, Investigation & Analysis techniques and processes; and reporting into the newly appointed CISO. • Engage with Regional and Group IT leadership teams on a regular basis • Manage 365/24/7 Security Platform Service for incident detection and response across a number of locations, building and developing a specialist team • Manage all operational requirements for the Security Platform, ensuring it remains operationally capable through effective recruitment, development of processes, delivery of KPIs and SLAs, training, recruitment, and performance management. • You will be working with leading edge Continuous Security Controls tooling such as Cyciv, Sentinel One, ProofPoint, Netskope, Intruder, ManageEngine, Security ScoreCards, Last Pass • Co-ordination with stakeholders, build and maintain positive working relationships
Duties and responsibilities
STAFF MANAGEMENT
• Provide leadership, guidance and technical expertise to deliver a professional service • Developing and maintaining all staff training matrixes, graded assessment sheets and appraisal forms. • Responsible for overall use of resources and initiation of corrective action where required for Security Platform Center
SECURITY TOOLING & PROCESS MANAGEMENT
• You will be working with a broader team of in the Regions to operate and continuously improve industry-leading security management capability and processes as the Security Lead you will be responsible for partnering with Regional Leads to ensure Security requirement are delivered. • Optimise tools and processes that prepare the Security Platform to respond to security threats of the future
• Creation of reports, dashboards, metrics for security operations and presentation to Sr. Mgmt.
SECURITY MONITORING & INCIDENT EVENT MANAGEMENT
• Excellent knowledge of Forensic activities – Collect / Examine / Analyse / Report / Review • Excellent knowledge and experience working with SOAR, Vulnerability Management, SIEM and other tools used in Incident Response • Improve our knowledge and understanding of emerging threats so that were better able to identify and detect attacks • Provide clear and concise communication with technical and non-technical stakeholders so that vulnerabilities are understood and addressed. • Review and analyse vulnerability data to identify trends and patterns. • Advise those responsible for remediation on best reduction/remediation of risks. • Operate the Vulnerability Management process including suggesting applicable change control, and security exceptions. • Ensure that threat hunting and incident response activities with research and analysis • Partner with relevant teams/managers to enable the wider organization to use threat intelligence for informed decision making
REPORTING
• Define and review key security performance indicators that ensure service delivery and service improvements • Develop and create reports for management updates and escalations • Develop, track, and report on key program performance metrics • Continuously monitor processes and drive improvements in efficiency and quality of our security programs • Creation of reports, dashboards, metrics for security operations and presentation to Sr. Mgmt.
COMPLIANCE & SLA’s
• Contribute to build, develop and maintain Security Platform policies, procedures and processes for security detection and response • Review policies and highlight the challenges in managing SLAs
Minimum competencies
• Minimum of 7 years experience in the Security field • He/She will have a broad and deep technical knowledge, specifically in the fields of operating system security, network security, cryptography, software security, malware analysis, forensics, security operations, incident response, and emergent security intelligence. • Experience managing a global Security Platform function with responsibility for mentoring, guiding and training teams of Security Analysts and Engineers. • Demonstrable ex



