Head/Vice President - JSOC - Security Operations Center Lead - IT

Job Title : Vice President, JSOC Lead

Role Summary/Purpose :

The JSOC Lead drives operational excellence and 24/7/365 monitoring. This role fosters a culture of innovation and collaboration while maintaining steady state operations. The SOC manager will contribute to detection, incident response, cyber hunting, and Sec DevOps. The individual will grow our strategy and identify adversaries through techniques like hunting. The SOC has transformed to a next generation center of excellence requiring an individual passionate about cyber threats.

Essential Responsibilities :

- The JSOC Lead is the most senior incident escalation point for the team. This analyst will ensure steady state operations are optimally configured and running 24/7/365.

- Be an example of how to collaborate and work with other teams within Information Security, Physical Security, Fraud, and IT.

- Work in coordination with other IT security functions to determine requirements and opportunities for threat detection and policy / prevention recommendations.

- Support incident response activities, assisting with the artifact collection, triage and remediation processes while documenting lessons learned.

- Utilize key performance indicators to track analyst workloads as well as the efficiency of detection signatures/rules and associated monitoring technologies.

- Identify potential process improvement projects and serve as a change agent through IT.

- Interface with fellow team members, colleagues on the security team, business partners, management, vendors, and external parties on best practices.

- Responsible to ensure IS tools and processes meet regulatory requirements

- Establish and maintain business/IS relationship.

- Understand business objectives, priorities, drivers and technology focus areas.

- Benchmark and implement industry best practices to mitigate potential threats to digital infrastructure and operations such as MITRE ATT&CK and NIST CSF

- Contextualize findings to specific business risks or vulnerabilities

- Support the design and implementation of procedures and controls necessary to ensure and protect the safety and security of all information systems assets, including prevention of intentional or inadvertent access, modification, disclosure, or destruction.

- Provide subject matter expertise and counsel to management regarding vendors, technologies, and special projects.

- Support the preparation of appropriate reports and communicate status and results

- Collaborate with management in developing technical directions, setting objectives, and setting realistic and challenging goals

- Perform other duties and/or special projects as assigned

Qualifications/Requirements :

- Bachelor's degree in Computer Engineering or related field, with a minimum of 10 years of experience in Information Technology

- Must have expertise and exposure in Content Development, Threat Intel & Hunting and SOC Continuous Monitoring

- Prior cyber incident response experience and/or experience working in high tempo cyber operations environments

- Results driven, strategic, conceptual, and innovative thinker

- Experience presenting to senior management

- Highly analytical, detail-oriented, and strong problem solving with a common-sense approach to resolving problems

- Expertise to clearly define complex issues despite incomplete or ambiguous information

- Strong oral and written communications skills

- Strong interpersonal and critical thinking skills

- Excellent consulting skills and superior ability to develop and maintain effective client relationships

Desired Characteristics :

- One or more relevant security certifications (GCIH, GCIA, GCFE, GCFA, or comparable)