Cyber Incident Commander – Global CERT - Santander Digital Services
Country: Spain
SANTANDER DIGITAL SERVICES is looking for a Cyber Incident Commander, based in our Boadilla del Monte office.
WHY YOU SHOULD CONSIDER THIS OPPORTUNITY
At Santander, we are key players in the transformation of the financial sector. Do you want to join us?
Santander Digital Services (SDS) is the technology and operations team at Santander. We believe in the importance of technology aligned with business needs, creating value for users, communities, and fostering innovation. Our team of over [number] professionals across Spain, Portugal, Poland, UK, USA, Mexico, Chile, and Brazil develops and implements financial solutions using a broad spectrum of technologies, including Blockchain, Big Data, and Angular, on both on-premise and cloud platforms.
Santander is committed to equal opportunities regardless of gender identity, culture, or disability. Our mission is to help more people and businesses prosper. We maintain a strong risk culture, expecting all professionals to proactively manage risks.
WHAT YOU WILL BE DOING
As a Cyber Incident Commander, you will provide specialized services to help entities manage and investigate cyber incidents and threats.
Your responsibilities include:
* Being an active member of the Incident Coordinators team within the Global CERT.
* Leading the response team responsible for managing incidents, comprising Incident Coordinators, Handlers, Forensic Analysts, and Intelligence Analysts.
* Defining strategies and tailored action plans for each incident.
* Collaborating with Local CERTs in incident handling.
* Managing cybersecurity incidents affecting Third Party vendors and providers, mitigating potential risks to the Group.
* Owning, responding to, and coordinating the most critical cybersecurity incidents across the Group.
* Participating in incident response procedures on a rotating On-Call basis.
* Assisting in post-incident analysis to identify lessons learned and improve security posture.
* Working with key stakeholders such as Global Forensics, Security Operations Centre, Legal, and others.
* Contributing to the development and improvement of incident response plans, policies, and procedures.
* Being part of a collaborative global cybersecurity community.
EXPERIENCE
* Experience in Cybersecurity Incident Response or similar roles.
* Crisis management experience is desirable.
EDUCATION
* Technical degree or relevant computing modules.
SKILLS & KNOWLEDGE
Required
* Knowledge of Incident Response and Handling methodologies at an experienced level.
* Understanding of cyber incident categories, response timelines, and procedures.
* Familiarity with cyber defense, information security procedures, and regulations.
* Knowledge of cyber attack stages (reconnaissance, scanning, gaining access, etc.).
* Understanding of risk management processes.
* High proficiency in English.
Recommended
* Certifications such as CISSP, CISA, CISM, CEH, OSCP, GCIH are preferred.
* Experience in the financial or banking industry is a plus.
#J-18808-Ljbffr