Cyber Incident Commander – Global CERT - Santander Digital ServicesCountry: Spain
SANTANDER DIGITAL SERVICES is looking for a Cyber Incident Commander, based in our Boadilla del Monte office.
WHY YOU SHOULD CONSIDER THIS OPPORTUNITY
At Santander () we are key players in the transformation of the financial sector. Do you want to join us?
Santander Digital Services (SDS) is the team of technology and operations at Santander. We are convinced of the importance of technology that is aligned with the requirements of the business and that out work not only brings value to users, people and communities but also fosters individual creativity. Our team of over, people in countries (Spain, Portugal, Poland, UK, USA, Mexico, Chile and Brazil) develops and/or implements financial solutions across a broad spectrum of technologies (including Blockchain, Big Data and Angular among others) on all kinds of on-premise and cloud-based platforms.
Santander is proud of being an organization where there are equal opportunities regardless of gender identity, culture and disability. Our mission is to contribute to help more people and business prosper. We embrace a strong risk culture and all of our professionals at all levels are expected to take a proactive and responsible approach toward risk management.
WHAT YOU WILL BE DOING
As a Cyber incident Commander, you will provide specialized services to help entities to manage and investigate cyber incidents and threats.
We need somebody like you to help us in different fronts:
1. Be an active part of the Incident Coordinators team of Global CERT.
2. Lead the response squad created to manage the incidents, made up of different roles: Incident coordinator, Incident Handlers, Forensic Analysts and Intelligence Analysts.
3. Define the strategy and a tailored action plan to respond to each incident.
4. Collaborate with the Local CERTs in the handling of the incidents.
5. Coordinate and manage cybersecurity incidents impacting Third Party vendors and providers, mitigating the potential risk that may pose to the Group.
6. Become part of a world class team that will own, respond and coordinate the most relevant and challenging cybersecurity incidents across the Group.
7. Be available to participate in the incident response procedure with a On-Call scheme rotating among all the team members.
8. Collaborate during the aftermath of a cybersecurity incident in the identification of Lesson Learnt that will shape and evolve the Group’s security posture.
9. Collaborate with key stakeholders within the bank, such as Global Forensics, Global Security Operations Centre, Corporate Security & Intelligence, Global Cyber Fraud, Global Legal, Secure User Experience team, among others.
10. Team up in projects related with the development and improvement of Incident Response plans, policies, and procedures.
11. Enjoy being part of a strong and collaborative Cybersecurity Community across the world.
EXPERIENCE
12. + years of experience in Cybersecurity Incident Response or similar responsibilities.
13. Experience in crisis management is desirable.
EDUCATION
14. Technical degree or Computing Modules.
SKILLS & KNOWLEDGE
Required
15. Knowledge of Incident Response and Handling methodologies – Experienced level.
16. Knowledge of cyber incident categories, incident response, and timelines for responses.
17. Knowledge of cyber defense and information security procedures and regulations.
18. Knowledge of cyber attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).
19. Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
20. High level of English.
Recommended
21. Desired one or more of the following certifications (CISSP, CISA, CISM, CEH, OSCP, GCIH).
22. Experience in the financial/banking industry.