Incident Response Coordinator

About the role

Make your mark at one of the biggest names in payments. As part of the Global Cybersecurity Incident Management (GCIM) team, you will coordinate containment, eradication, and post-incident activities for critical cyber security incidents. You will play a key role in the Incident Response Team (IRT) overseeing, validating, and documenting containment, acting as a point of escalation for our Global Security Operations Center (GSOC).

Responsibilities

• Coordinate incident response in line with the corporate security incident response plan.
• Manage post-incident activity to include scheduling and chairing Post Incident Reviews (PIR), the documentation of Root Cause Analysis, and the tracking of actions to prevent incident recurrence.
• Provides 24x7 on-call incident management support on rotation for critical security incidents.
• Stays up to date with new and emerging threats that can affect the organization's information assets, third-party software/solutions, IT configuration changes, and networks/systems.
• Provides executive-level written communication during incident response for inquiries related to security incidents or assigned cases.
• Collaborate with whitehat researchers to coordinate the remediation of findings from the organization’s Bug Bounty Program.
• Works closely with Risk Management teams to document identified risks and issues highlighted through post-incident or root cause analysis activities.
• Maintains a working knowledge of key data security frameworks and regulations such as PCI, Logical Security guidelines and models, HIPPA, GDPR, PII, NIST CSF.
• Collaborates with Legal and Privacy Offices throughout the company on critical data protection/security incidents.
• Participates in reviews and assessments to provide recommendations to enhance or improve the security posture of environments as part of post-incident activities and lessons learned.
• Maintain and follow runbooks for day-to-day incident response activities in line with the corporate security incident response plan.

Requirements

• Relevant experience or degree in: Bachelor's degree in Computer Science, Info Security, or related field. Or relevant work experience in a related field.
• Typically minimum 2 years relevant experience with Incident Management or Incident Response.
• Knowledge of network operations or engineering or system administration on Unix, Linux, MAC, or Windows; common security operations, intrusion detection systems, Security Incident Event Management systems, Penetration Testing, Web Application assessment, Secure Coding practices, Cloud Technologies.
• Strong verbal and written communication skills.
• Demonstrated ability to effectively communicate ideas and persuade others to accomplish challenging goals and objectives.
• Ability to facilitate meetings and enable discussions that lead to resolution and communicate results.

Qualifications

• Developing professional expertise, applies company policies and procedures to resolve a variety of issues.
• Job Complexity: Works on problems of moderate scope where analysis of situations or data requires a review of a variety of factors. Exercises judgement within defined procedures and practices to determine appropriate action.
• Supervision: Normally receives general instructions on routine work, detailed instructions on new projects or assignments.
• Industry Knowledge: Continued self-education of new and emerging threats and relevant processes, controls, or technologies to mitigate them.
• Incident Response: Knowledge and skills to contribute to all phases of Incident Response.

Skills / Knowledge

• Developing professional expertise, applies company policies and procedures to resolve a variety of issues.
• Job Complexity: Works on problems of moderate scope where analysis of situations or data requires a review of a variety of factors. Exercises judgement within defined procedures and practices to determine appropriate action.
• Supervision: Normally receives general instructions on routine work, detailed instructions on new projects or assignments.
• Industry Knowledge: Continued self-education of new and emerging threats and relevant processes, controls, or technologies to mitigate them.
• Incident Response: Knowledge and skills to contribute to all phases of Incident Response.

Benefits

What makes a Globalpayer? Globalpayers think like a client, act like an owner and win as one team. We’re curious and innovative – always finding better ways to deliver impact. We empower each other to make decisions, and it’s our passion that drives excellence in everything we set out to do.

Apply now to take your career global. Learn more about our benefits.