Manager, Cyber Security Incident Response

• Full-time continuing role as Manager, Cyber Security Incident Response
• Excellent salary package available
• Kensington, Sydney location, 2-3 days in the office, Hybrid working

With a significant uplift within our Cyber teams, this role of Manager, Cyber Security Incident Response will lead an experienced CSIRT team responsible for managing all aspects of the incident response process operating within a hybrid operating model working closely together with our Managed Security Service Providers (MSSP). The position requires expert knowledge and significant experience in:  Cyber security incident management and response, digital forensics, threat intelligence and threat hunting, cyber security frameworks, security technologies and automation including SIEM, EDR and SOAR, and Security Operations Centre service delivery.

We need someone who has exceptional interpersonal skills, enabling effective communication and collaboration with partners, vendors, and both internal and external stakeholders. The role will also develop and maintain incident reports, playbooks, procedures, escalation processes, and response plans aligned to best practices. The role reports directly to the Head of Cyber Security Operations. There will be a team of Specialists reporting to the Manager, Cyber Security Incident Response.

**Some accountabilities:**Lead and mentor a team of incident response specialists, overseeing major incident response, threat hunting, threat intelligence, and digital forensics services within a hybrid operating model.  Foster team development and collaboration ensuring high standards of performance in delivering these critical services.  Manage investigations and ensure resources are appropriately assigned to perform actions in partnership with all relevant stakeholders  Manage and co-ordinate incident response activities between UNSW and external partners.  Act as an escalation point for major security incidents impacting the organisation, coordinating communications and response activities together with other operations teams.  Actively participate in crisis management efforts, ensuring alignment between incident response, business continuity, and executive leadership to minimise impact and expedite recovery.  Accurately document all actions taken during an incident, preparing detailed technical reports and executive summaries in alignment with established processes, standards, and frameworks.  Present security reports on a regular basis analysing trends, patterns, and insights to provide recommendations. Provide regular updates on all aspects of the incident management function to ensure issues, risks, and problems are addressed in a timely manner and services are operating effectively following a continuous improvement model. You will be required to be available on-call roster for emergencies.

Who you are:

• A relevant tertiary qualification with subsequent relevant experience or equivalent competence gained through any combination of education, training, and experience.
• Minimum ten years of industry experience in cyber security incident response, with a minimum three years of management experience in a cyber security environment or in a senior support role.
• Strong technical skills and operational experience in the management, configuration, and support of security controls including network security, endpoint security, application security, data protection, and/or identity and access management.
• Comprehensive analytical and problem-solving skills and proven capacity to exercise initiative, flexibility and to be proactive in development of robust solutions to problems.
• Strong consultation, influencing and negotiation skills and proven ability to engage effectively with diverse stakeholders to achieve successful outcomes.
• Strong written and verbal communication skills, with a high level of attention to detail for deliverables produced.
• Demonstrated success working effectively and collaboratively on initiatives with a range of people at different levels within an organisation.
• Excellent time management skills, with a demonstrated ability to respond to changing priorities, manage multiple tasks and meet competing deadlines by using judgement and initiative.
• Relevant industry certifications such as CISSP, CISM, GCIH, GCFA are highly desirable but not required.
• An understanding of and commitment to UNSW’s aims, objectives and values in action, together with relevant policies and guidelines.

**Benefits and Culture -**Flexible Working Options (work from home, flexible hours etc), Career development opportunities, 17% Superannuation contributions and additional leave loading payments , Additional 3 days of leave over Christmas period, Discounts and entitlements (retail, education, fitness) For further details on the benefits, please visit https://www.jobs.unsw.edu.au/lifestyle-benefits

To apply:  Submit CV, Cover Letter and responses addressing Who you are.

Please note: Sponsorship is not available for this role; valid Australian working rights are required on application.

Pre-Employment Checks - As part of our recruitment process candidates may be required to undergo pre-employment screening, which may include reference checks, qualification verification, right-to-work verification, and criminal history screening where relevant to the role.

Contact: Jen MacLachlan - Talent Acquisition Partner- e: [email protected]

Please apply through the application portal as we do not accept direct applications to the email above. Applications close: Sunday 13th of September at 11.30pm

UNSW is committed to equity diversity and inclusion. Applications from women, people of culturally and linguistically diverse backgrounds, those living with disabilities, members of the LGBTIQ+ community; and people of Aboriginal and Torres Strait Islander descent, are encouraged. UNSW provides workplace adjustments for people with disability, and access to flexible work options for eligible staff.