Cybersecurity Incident Manager (EMEA)

Location:

Remote - England, United Kingdom

Job ID:

R0059587

Date Posted:

2024-10-04

Company Name:

HITACHI ENERGY UK LIMITED

Profession (Job Category):

IT, Telecom & Internet

Job Schedule: 

Full time

Remote:

Yes

Job Description:

The world is rapidly moving towards more efficient power distribution to support renewable, greener technologies. At Hitachi Energy, we are at the forefront of this revolution, delivering cutting-edge solutions to customers and countries across the globe. Our mission is not just a goal, but a passion that drives us every day.

However, our journey to a greener future faces the challenge of an increasingly complex and disruptive cybersecurity landscape. This is where you come in.

By joining our Cyber Defense Center (CDC) team as a Cybersecurity Incident Manager, you will be an integral part of protecting and advancing our mission. You will tackle a variety of cybersecurity challenges, ensuring that our innovative work in renewable energy remains uninterrupted.

As an Incident Manager, you will lead a regional team of Incident Responders, taking charge of the organization's response during high-priority incidents. You will be responsible for overseeing key Cyber Defense services, including Security Monitoring, Incident Response, and Digital Forensics. This role involves ensuring strong performance from our MSSP, while continuously working to enhance and optimize these services to maintain a high level of preparedness.

You'll collaborate with a diverse, multicultural team across the globe, providing 24/7 response capabilities throughout the year. Working in a modern, hybrid environment, you will encounter a high variety of cybersecurity incidents, including legacy IT, Cloud, OT/ICS, supply chain, and product security. You will also have access to the latest security tools, including next-generation AI-enabled platforms.

If you are passionate about cybersecurity and excited about helping us achieve a greener future, we want to hear from you. Apply now to join our team and make a significant impact on a global scale!

Your Responsibilities:

• Lead Incident Management efforts for all critical priority and major security incidents.
• Coordinate efforts across the organization to ensure incidents are managed efficiently and resolved effectively.
• Communicate with internal and external stakeholders, including senior leadership, legal teams, and regulatory bodies.
• Ensure compliance with relevant laws and regulations related to cybersecurity.
• Responsible for the effective and timely resolution of all cybersecurity incidents.
• Oversee the full incident response lifecycle, from detection to post-incident reviews.
• Ensure that security incidents are identified, investigated, and mitigated according to established protocols.
• Ensure that the appropriate resources and protocols are in place to handle incidents at all levels.
• Lead the continuous improvement of incident response processes, playbooks, and tools.
• Align processes and tools with industry best practices and exceed those standards.
• Lead a regional team of Incident Responders and Analysts.
• Ensure their ongoing professional development through mentoring, training, and performance management.
• Conduct regular team meetings, performance reviews, and one-on-one sessions with team members.
• Responsible for the performance, development, and morale of the regional incident response team.

Your Background:

• Bachelor’s Degree in Cybersecurity, Computer Science, Information Technology, or a related field OR equivalent practical experience with a minimum of six (6) years in cybersecurity roles.
• A minimum of five (5) years of direct experience in Cybersecurity Incident Response within a large enterprise or Managed Security Service Provider (MSSP) environment.
• Proven experience in leading and managing teams of security professionals in incident detection, response, and resolution.
• Demonstrated success in handling high-severity, complex incidents as the primary incident manager or controller.
• Experience coordinating cross-functional teams and external stakeholders during incidents.
• Hands-on experience using frameworks such as MITRE ATT&CK.
• Proficiency in Security Information and Event Management (SIEM) platforms, endpoint detection and response (EDR) tools, and other threat detection technologies.
• Strong understanding of cloud security (AWS, Azure, Google Cloud) and network security architectures.
• Demonstrated leadership ability to mentor, manage, and develop a cybersecurity incident response team.
• Exceptional communication and collaboration skills, with the ability to engage effectively with both technical staff and non-technical executive leadership.
• Strong decision-making skills under pressure, with the ability to remain calm and focused in crisis situations.
• Ability to manage multiple incidents or projects concurrently.
• Willingness to be on-call for escalations and respond to incidents outside of regular working hours.
• Ability to travel occasionally for meetings, training, or on-site incident resolution.