Cyber Incident Manager

Job Description

Company: Outbreach

• Outbreach is a specialist cyber incident response and crisis management firm working with mid market organisations in the UK and the Gulf. We bring together incident management, digital forensics, legal, crisis communications and recovery under one roof so that a client in the middle of a breach has one partner rather than five. We are recruiting on call bench Incident Managers based in the UAE who can be called on to supplement our permanent team when clients experience an incident.
The Incident Manager (IM) is the glue who holds together all other teams and stakeholders in a cyber incident. You can think of this role like a project manager but in a critical and fast moving incident.
The IM will be expected to ensure all the other stakeholders know what is expected of them and ensure they are held accountable for their activities. The IM will be extremely detail orientated and comfortable with ensuring processes are appropriately followed and progressed as needed during the incident and quickly raising any challenges to the relevant owner.

IMs will generally only be working on one incident at a time though in some circumstances you may be asked to oversee multiple incidents concurrently which will involve heightened diligence.

Key Responsibilities

Serving as the subject matter expert on incident response process and procedures.

Capturing and documenting all information from triage calls into standardised documentation.

Maintaining the incident log and ensuring key actions and deadlines are met.

Ensuring the smooth and timely flow of information and communication across all involved.

Managing the logistics of an incident such as ensuring meetings are scheduled, software and equipment is provided, travel is arranged.

Highlighting blockers or problems and ensuring they are appropriately prioritised.

Supporting the incident resolution efforts.

Preparing reports, providing notifications, and disseminating deliverables.

Owning and operating any system critical to the operations of the incident, such as ticketing and monitoring.

Developing and refining the incident management processes as necessary during and after incidents. Learning and improving continuously.

Skills and Experience

Cyber security experience is required for this role. Preference will be given to candidates with prior experience in cyber incident response teams.

3+ years Information Technology or Information Security support experience.

Working knowledge of Public Relations, Communications, Marketing and Law.

Excellent telephone and video conference manner and communication skills.

Very strong verbal and written English, particularly spelling, grammar and style.

Good understanding of cyber security including TTPs (Tactics, Techniques and Procedures), common tools and industry stakeholders.

Formal document and report creation for senior executives and external clients.

Experience within high pace, high pressure environments and desire to work in incidents and crisis management.

ITIL or other similar incident management methodologies.

Highly Desirable but not Vital In depth experience with regulations and legislation such as the UAE PDPL, DIFC and ADGM regimes, GDPR, DORA and other data or privacy laws.

Frameworks and governance such as NIST, SOC 2, ISO 27001.

Security certification such as CEH, CCNA, OSCP, GCIH.

Security tools and practices such as SIEM, EDR, NDR, OSINT.

Arabic language skills.

Commitment

As a bench Incident Manager you will be called whenever a suitable incident is raised by our clients which matches your skill and experience level. There is no expectation for you to remain on call or to accept any incident when you are not available. However, once you commit to an incident you will become a key member of the response team and will be expected to remain engaged for the duration of the incident.

At the least this would be for one day, but in most cases will likely be for two to four weeks.

Full training and support will be provided to successful candidates, who will be expected to attend regular paid meetings to ensure they are familiar with the company, its methodologies and market.

Pay and Benefits

Remote working with much of your work being done where you please.

Flexible hours that can be scaled up or down as suits you.

Working in an expanding cyber security business where you can grow in your career and help shape the business.

Training and development budget aligned to formal relevant qualifications.

Hourly pay equivalent to over AED 300,000 a year, with a significant increase for unsociable hours if needed.

Eligible for company stock options, subject to minimum hours.

Location: United Arab Emirates, remote. Engagement: On call bench role, hourly paid. Full details and the application form are also at outbreach.com/career/incident-manager-uae/

Source: BeBee