Assistant Director - Digital Forensics & Incident Response

Responsibilities & Qualifications

• Strategic planning for investment and / or adoption of cybersecurity technologies to maximize effectiveness of cybersecurity controls against rapidly evolving threats
• Work closely with internal and external stakeholders to support the analysis of alerts and management of cybersecurity incidents
• Ensure that the Incident Management team can efficiently and effectively analyse and respond to alerts and / or incident while following the appropriate procedures and playbooks
• Lead and drive the management of cybersecurity incidents as the cybersecurity incident response and digital forensic manager
• Drive continuous improvement of the Incident Response framework, Cybersecurity Event Management and Incident Response Plan, Standard Operating Procedures and Playbooks for alerts analysis and incident response.
• Drive continuous improvement of the Digital Forensic Standard Operating Procedures.
• Mentor, train and provide oversight for cybersecurity analysts and digital forensic & incident responders
• Track and analyse cybersecurity metrics for optimal effectiveness, benchmarking and management reporting
• 10 or more years of experience in security operations especially in the area of cybersecurity incident response and digital forensic
• Experience in conducting detailed investigations and analysis of cyber security alerts
• Strong interpersonal skills with the ability to communicate with internal and external stakeholders including explaining technical concepts to non-technical recipients (technical and non-technical)
• Ability to work independently but proactive in reaching out for support
• Familiarity with the Kill Chain Methodology, MITRE ATT&CK Framework, NIST Cybersecurity Framework (CSF), etc.
• Bachelor and / or Master degree in Computer Science, Engineering or equivalent
• Relevant certifications in cybersecurity, e.g. CISSP, GCFE, GREM, GCIA, GCIH, EnCE or similar

#J-18808-Ljbffr