Cyber Threat Incident Management Principle

Job Description:
A company we are working with who is an is driven to provide high quality health care services is looking for a Cyber Threat Incident Management Principal. Playing a critical role in safeguarding the organization's information assets and ensuring the confidentiality, integrity, and availability of sensitive data. The role primarily revolves around identifying, analyzing, and responding to cyber threats and security incidents to mitigate risks and minimize potential damage.
Responsibilities:

1. Incident Detection and Monitoring: Monitor security systems and tools to detect and analyze potential cyber threats and incidents. Utilize security information and event management (SIEM) platforms to identify anomalous activities and potential breaches.
2. Incident Analysis: Investigate and analyze security incidents to determine the nature and scope of the threat. Collaborate with cross-functional teams, including IT, legal, compliance, and business units, to assess the impact and potential risks of incidents.
3. Incident Response: Develop and execute incident response plans to contain and mitigate cyber threats. Coordinate with internal and external stakeholders to ensure timely and effective incident resolution. Provide technical guidance during response efforts.
4. Threat Intelligence: Stay updated on the latest cybersecurity threats, vulnerabilities, and attack techniques. Incorporate threat intelligence into incident response strategies and recommend proactive measures to prevent future incidents.
5. Documentation: Maintain accurate and detailed records of security incidents, including analysis, response actions taken, and lessons learned. Provide reports and briefings to senior management and relevant stakeholders.
6. Collaboration: Collaborate with cross-functional teams to enhance the organization's cybersecurity posture. Work closely with IT teams to implement security controls, patches, and updates based on incident findings.
7. Training and Awareness: Develop and deliver training programs to educate employees about cybersecurity best practices, incident response procedures, and security awareness.
8. Compliance and Regulations: Ensure compliance with relevant cybersecurity regulations, standards, and industry best practices. Assist with audits and assessments as required.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field (Master's degree preferred).
• Relevant industry certifications such as CISSP, CISM, or GIAC certifications.
• Extensive experience in incident response, cybersecurity operations, and threat intelligence.
• Knowledge of healthcare industry regulations (such as HIPAA) is a plus.