Cyber Security Manager – CSOC & Cyber Engineering
- Vancouver, BC
- 140.000-170.000 $ par an
- Permanent
- Temps-plein
- Work closely with company leadership in the implementation, maintenance, and support of enterprise class security software.
- Work closely with the operations teams on the implementation and support of security systems and hardening of Global Relay infrastructure.
- Work closely with the Architects and Development teams on the design and deployment of specialized security components that are integrated to Global Relay's customer-facing products.
- Ensure timely detection, analysis, containment and remediation of security threats and incidents.
- Monitor security tools and systems to identify and respond to potential threats in real time.
- Coordinate and escalate incident response as per Global Relays incident response processes and procedures.
- Participate in the design and maintenance of Global Relay's security policies and procedures.
- Act as the approval point for various changes as per the change management process.
- Manage a team of Cyber Security Specialists responsible for running day-to-day security operations and cyber security programs.
- Lead team's hiring processes and new team member training.
- Mentor and guide the professional and technical development of team members.
- Communicate job expectations, plan, monitor, appraise, and review job contributions.
- Minimize turnover and attrition for existing employees.
- Help your team build relationships across functions and time zones to maintain team cohesion and morale.
- Prepare and complete action plans, implement production, productivity, quality, and customer-service standards, resolve problems, complete audits, and identify trends.
- Lead continuous improvement initiatives for processes, procedures and playbooks across CSOC and Cyber Engineering.
- Develop, maintain and report KPIs and metrics to measure performance and effectiveness of security operations.
- Identify risks and issues and report into Global Relays' Information Security Risk Management processes.
- Instil a spirit of continuous improvement in skills development, documentation, procedures, and expanding capabilities by leveraging automation.
- Maintain safe and healthy work environment by establishing, following, and enforcing standards and procedures.
- Develop and maintain process documentation, instantiating a culture of knowledge sharing, avoiding knowledge hoarding.
- Conduct team meetings to update members on best practices and continuing expectations.
- Provide encouragement to team members, including identifying areas for additional training or skills development.
- Answer team member questions, help with team member problems, and oversee team member work for quality and guideline compliance.
- Communicate deadlines and goals to team members.
- Develop strategies to promote team member adherence to company regulations and performance goals.
- Participate in annual individual performance appraisals (IPAs) for team members.
- Approve team members' time off requests.
- Occasional travel to manage team collaboration activities.
- Other duties as assigned.
- 10+ years of experience managing a technical team, preferably in a NOC or SOC or other 24 x 7 environment.
- 5+ years in a leadership or management role within an Operations environment.
- Strong experience in incident response, threat detection, vulnerability management and security tool management.
- Demonstrated ability to lead technical teams and collaborate cross-functionally.
- Clear understanding of current threats, attach techniques and mitigation strategies.
- Industry Qualifications such as CISSP, CISM, GCIA or GCIH.
- In-depth knowledge of information security frameworks such as ISO 27001, SOC 2, FedRAMP, MITR ATT&CK and CIS Controls.
- Experience using an internal and external ticketing system for ITIL-based incident, problem and change management.
- Previous experience in troubleshooting day-to-day operational processes such as report generation, data verification, data correlation, etc.
- Ability to research and maintain proficiency in software, tools, techniques, countermeasures, and trends in information security, network vulnerabilities and encryption.
- Ability to communicate diplomatically and effectively at all levels of the organization with all classifications, including the very technical.
- Strong understanding of information security related tools and technologies.
- Excellent verbal, written and documentation skills.
- Methodical and creative approach to problem-solving.
- Superior time management and prioritizing ability.
- Strong relationship building, Leadership and motivational skills.
- Conflict and people management skills.