Information Security Incident Manager

at  Forseven

Forseven is rethinking what it is to be a car company through powerful technologies and engineering excellence. A new take on an established industry, we’ve got a growing team that is knowledgeable, experienced and deeply passionate about this endeavour.
We’re seeking an Information Security Incident Manager to join our rapidly growing team. Reporting to our Head of Information Security, you will develop the incident response plans for Forseven and respond to incidents, vulnerabilities and threats identified, working closely with the Security Operations Centre.
This pivotal role will operate in a hybrid capacity from our planned Bicester location and/or one of our offices near Guildford, Bicester or Leamington Spa. The successful candidate will have the opportunity to work alongside some of the most visionary minds in the automotive field.
This is a rare and exciting opportunity to become part of a scale-up, where your contributions will play a crucial role in shaping the future of our forward-thinking company. With its rapid growth trajectory and dynamic nature, Forseven offers you an exceptional platform to help drive strategy as we expand into new horizons.

EXPERIENCE AND SKILLS:

• Experience in incident management and security operations management.
• Experience with a wide variety of security tools including Security Information and Event Management (SIEM).
• Knowledge of cyber threat intelligence platforms and methodologies.
• Familiarity with vulnerability scanning and penetration testing tools
• Strong understanding of security frameworks and regulations (e.g., ISO 27001, NIST, GDPR).
• Excellent analytical and problem-solving skills.
• Strong communication and leadership abilities.
• Calm under pressure

QUALIFICATIONS:

• Bachelor’s degree in Information Security, Computer Science, or a related field or relevant experience
• Professional certifications such as CISSP, CISM, or equivalent.

• Respond to Critical Incidents: Lead the response to security incidents, ensuring a swift and effective approach to minimize impact and restore normal operations.
• Manage External SOC: Oversee the external SOC, ensuring they provide high-quality services and support the company’s security posture.
• Continuous Threat and Exposure Management: Monitor and evaluate the threat landscape, adjusting security measures to protect against emerging threats and vulnerabilities.
• Intelligence and Threat Intelligence: Collect and analyse intelligence on potential threats, sharing insights with relevant stakeholders to inform security strategies.
• Vulnerability Management: Develop and maintain a vulnerability management program, including regular assessments and remediation activities.
• Develop Incident Response Plans: Create and maintain comprehensive incident response plans, outlining roles, responsibilities, and procedures for different types of security incidents.
• Training and Awareness: Conduct training sessions and awareness programs to ensure all employees are prepared to respond effectively to security incidents.
• Collaboration: Work closely with IT, legal, public relations, and other departments to ensure a coordinated response to security incidents.
• Reporting and Documentation: Maintain accurate records of security incidents and responses, providing regular reports to senior management.