Cyber Security Manager

Your role:

The Cyber Security Manager leads our frontline defence against cyber threats and is responsible for managing technical security teams including the Cyber Security Operations Center and Cyber Engineering within the respective region. Acting as the first line of defence, this manager ensures the deployment, operations and continuous improvement of security tools, technologies and processes that protect Global Relay. The individual manages schedules for a team of technical Cyber Security Specialists, 24 x 7 coverage, communicates company goals, policies, requirements, and deadlines to the team.  They motivate team members, supports management, including hiring and training, team performance, and communicates concerns to management and team members. The role includes leading incident response, driving threat intelligence capabilities and ensuring alignment with business and regulatory expectations. As well as evaluation of security systems and processes and working closely with but not limited to management, operations/DevOps, and development teams on security related matters.

Your responsibilities:

• Work closely with company leadership in the implementation, maintenance, and support of enterprise class security software.
• Work closely with the operations teams on the implementation and support of security systems and hardening of Global Relay infrastructure.
• Work closely with the Architects and Development teams on the design and deployment of specialized security components that are integrated to Global Relay’s customer-facing products.
• Ensure timely detection, analysis, containment and remediation of security threats and incidents.
• Monitor security tools and systems to identify and respond to potential threats in real time.
• Coordinate and escalate incident response as per Global Relays incident response processes and procedures.
• Participate in the design and maintenance of Global Relay’s security policies and procedures.
• Act as the approval point for various changes as per the change management process.
• Manage a team of Cyber Security Specialists responsible for running day-to-day security operations and cyber security programs.
• Lead team’s hiring processes and new team member training.
• Mentor and guide the professional and technical development of team members.
• Communicate job expectations, plan, monitor, appraise, and review job contributions.
• Minimize turnover and attrition for existing employees.
• Help your team build relationships across functions and time zones to maintain team cohesion and morale.
• Prepare and complete action plans, implement production, productivity, quality, and customer-service standards, resolve problems, complete audits, and identify trends.
• Lead continuous improvement initiatives for processes, procedures and playbooks across CSOC and Cyber Engineering.
• Develop, maintain and report KPIs and metrics to measure performance and effectiveness of security operations.
• Identify risks and issues and report into Global Relays’ Information Security Risk Management processes.
• Instil a spirit of continuous improvement in skills development, documentation, procedures, and expanding capabilities by leveraging automation.
• Maintain safe and healthy work environment by establishing, following, and enforcing standards and procedures.
• Develop and maintain process documentation, instantiating a culture of knowledge sharing, avoiding knowledge hoarding.
• Conduct team meetings to update members on best practices and continuing expectations.
• Provide encouragement to team members, including identifying areas for additional training or skills development.
• Answer team member questions, help with team member problems, and oversee team member work for quality and guideline compliance.
• Communicate deadlines and goals to team members.
• Develop strategies to promote team member adherence to company regulations and performance goals.
• Participate in annual individual performance appraisals (IPAs) for team members.
• Approve team members’ time off requests.
• Occasional travel to manage team collaboration activities.
• Other duties as assigned.

About you:

• 10+ years of experience managing a technical team, preferably in a NOC or SOC or other 24 x 7 environment.
• 5+ years in a leadership or management role within an Operations environment.
• Strong experience in incident response, threat detection, vulnerability management and security tool management.
• Demonstrated ability to lead technical teams and collaborate cross-functionally.
• Clear understanding of current threats, attach techniques and mitigation strategies.
• Industry Qualifications such as CISSP, CISM, GCIA or GCIH.
• In-depth knowledge of information security frameworks such as ISO 27001, SOC 2, FedRAMP, MITR ATT&CK and CIS Controls.
• Experience using an internal and external ticketing system for ITIL-based incident, problem and change management.
• Previous experience in troubleshooting day-to-day operational processes such as report generation, data verification, data correlation, etc.
• Ability to research and maintain proficiency in software, tools, techniques, countermeasures, and trends in information security, network vulnerabilities and encryption.
• Ability to communicate diplomatically and effectively at all levels of the organization with all classifications, including the very technical.
• Strong understanding of information security related tools and technologies.
• Excellent verbal, written and documentation skills.
• Methodical and creative approach to problem-solving.
• Superior time management and prioritizing ability.
• Strong relationship building, Leadership and motivational skills.
• Conflict and people management skills.