Cyber Security Incident Response Team Manager

"I can succeed as Cyber Security Incident Response Team Manager at Capital Group."

As a Security Operations Manager working as the Manager of our Cyber Security Incident Response Team (CSIRT), you will manage and lead a globally distributed 24/7 team responsible for reducing the impact of cybersecurity incidents at Capital Group.

You will have experience in managing the full cycle of Incident Response from triage to post incident, from low severity to firm-wide impacting operational outages caused by cyber incidents. Your experience will have come from managing an incident response team in a global Incident Response team at a large financial or other highly regulated organization. You will report directly to the head of Security Operations and will support the Chief Information Security Officer in ad hoc requests as necessary.

"I am the person Capital Group is looking for."

• Experienced in managing 24/7 Information Security incident response at large global financial in a leadership role

• 8+ years of overall IT experience, 5+ years with IT Security teams and engineering/ threat intelligence, and with 3+ in a people management role.

• CISM and/or CISSP qualifications held

• Can evidence excellent analytical and problem-solving skills.

• Ability to handle high pressure situations with key stakeholders.

• Experienced in complying with applicable national and international laws, regulations, and guidelines for IR.

• At ease with managing multiple priorities, ambiguity and rapidly moving business environment.

• Strong emotional intellect with demonstrated sustained leadership in a large organization involving multiple stakeholders.

• Experienced in using threat intelligence to drive process

• Proven ability to close down post incident work

• Demonstrated ability to recruit, retain and support diverse team members.

• A natural collaborator, with the drive and skills needed to bring people with you along your journey of technical and process excellence.

• Excellent technical writing and presentation skills, interpersonal and collaborative skills, and the ability to communicate information security and risk-related concepts to technical and non-technical audiences.

• Can prove a track-record in driving the day-to-day responsibilities of a diverse team of highly motivated, global associates.

• Proficient in the preparation of reports, dashboards, metrics, OKRs, KRIs and KPIs.

• Dedicated to the development of team members; skilled at identifying opportunities for growth and coaching team members.

• Delegates work effectively.

• Understands the types of events of interest in electronic logs and a proficiency with SIEM and SOAR solutions.

• Skilled at aligning to and measuring maturity against incident response frameworks https://e.g., NIST

• Expert at using the MITRE ATT&CK to frame incident analysis and post incident reporting.

• In-depth knowledge of security concepts, such as counter threat intelligence (attacker tactics, techniques and procedures), risk management, security triage, and forensic analysis.

• Good knowledge of various operating systems found in financial services firms.

• Good knowledge of cloud incident response with experience with varied on-premise, hybrid and cloud data center and application hosting strategies

• Bachelor's degree from an accredited institution, with degree (preferred) in Computer Science or Information technology systems security or related field.

• Desired Certifications (any of the following: include, but not limited to)

• GCTI (GIAC Cyber Threat Intelligence)

• GSEC (GIAC Security Essentials)

• GCIA (GIAC Certified Intrusion Analyst)

• GCIH (GIAC Certified Intrusion Handler)

• OSCP (Offensive Security Certified Professional)

• CEH (Certified Ethical Hacker)

• SANS Security SEC401, 501

‎

‎
San Antonio Base Salary Range: $130,398-$208,637
‎

‎
New York Base Salary Range: $168,145-$269,032
‎

‎

‎

‎

‎

‎

‎

‎

‎

‎

In addition to a highly competitive base salary, per plan guidelines, restrictions and vesting requirements, you also will be eligible for an individual annual performance bonus, plus Capital's annual profitability bonus plus a retirement plan where Capital contributes 15% of your eligible earnings.

You can learn more about our compensation and benefits here .

We are an equal opportunity employer, which means we comply with all federal, state and local laws that prohibit discrimination when making all decisions about employment. As equal opportunity employers, our policies prohibit unlawful discrimination on the basis of race, religion, color, national origin, ancestry, sex (including gender and gender identity), pregnancy, childbirth and related medical conditions, age, physical or mental disability, medical condition, genetic information, marital status, sexual orientation, citizenship status, AIDS/HIV status, political activities or affiliations, military or veteran status, status as a victim of domestic violence, assault or stalking or any other characteristic protected by federal, state or local law.