Director - IT Security Operations - FMCG

Responsibilities :

IT Security Incident Preparedness :

- The CSIRT Director will develop, maintain or support an intelligence capability to identify current and emerging IT security risks to the organization.

The CSIRT Director will :

- Act as a liaison between industry peers, government agencies (including law enforcement) and other specialists.

- Utilize commercial intelligence providers to gain insight into existing activities in the hacker and fraudster communities, as well as planned activities and emerging motivations.

- Coordinate with the security operations center, provided internally or by an external managed security services provider, to identify and assess IT security incidents.

- Advise the security advisory board of significant emerging threats, and recommend tactical steps to counteract these threats.

The CSIRT Director will exercise or support the preparedness of various parts of the organization to respond to IT security incidents via the following activities :

- In consultation with the crisis management team, develop and deliver desktop preparedness exercises at the executive committee level, at least annually.

- Participate in industry exercises.

IT Security Incident Management :

Leading the organization's response to IT security incidents, the CSIRT Director will perform the following tasks :

- Develop and maintain the IT security incident response process, including all required supporting materials.

- Develop functional requirements for roles that will be involved in the CSIRT program.

- Work with business units, IT functions and external providers to ensure that the process is mutually understood and agreed on, and that responsibilities are clear and accepted.

- Act as a liaison throughout the entire organization (including enterprise IT services, lines of business, public relations, legal counsel and customer call centers).

- Initiate the IT security incident response process, and execute decision authority to the extent of the role within that process.

- Ensure execution of the incident response process to the resolution of the incident.

- Ensure generation, maintenance and protection of required incident records, such as investigator journals.

- Organize, participate in and, if required, chair post incident reviews for presentation to the senior management.