Senior Manager, Cyber Security

at  UFA Cooperative Ltd

Department: Information Technology
Employment Type: Full-Time
Requisition ID: 621
Date Posted: November 4, 2024
Closing Date: November 18, 2024 or until filled

POSITION SUMMARY:

Reporting to the Director, Cyber Security & Infrastructure, the Senior Manager, Cyber Security will manage day-to-day cyber security operations and spearhead the implementation of advanced technologies and best practices to safeguard UFA against various security threats. The incumbent will act as the senior technical resource for information security operations, providing leadership and oversight in the areas of:
Security Threat Monitoring
Digital forensics and Incident Response (DFIR)
Threat Intelligence, Hunting, and Analytics
Security Architecture, Engineering and Administration

QUALIFICATIONS REQUIRED FOR THE POSITION:

A post-secondary diploma in a relevant field or equivalent combination of education and experience. Advanced degrees and technical certifications (e.g., SANS GCIH, GCFE, GCIA) are highly valued.
Minimum of 10 years of progressive experience in cybersecurity, with at least 4 years in a leadership role managing Security Operations Center (SOC), Digital Forensics and Incident Response (DFIR) teams, or similar.
Expert knowledge of Microsoft security solutions, including but not limited to Endpoint Detection & Response, SOAR, SIEM, Identity Security, DLP tools.
In-depth knowledge of modern security concepts such as common attack vectors, malware, security analytics and threat intelligence.
Expert knowledge of Cybersecurity Operations models and technologies (cloud, automation, orchestration, analytics, and risk-based approaches).
Expert knowledge of Microsoft Security solutions, including but not limited to Endpoint Detection & Response (EDR/XDR), automation (SOAR), SIEM, Identity Security, and Data Loss Prevention (DLP) tools.
Expertise in analyzing various telemetry sources including but not limited to EDRs, network security tools, and cloud security solutions.
Extensive experience authoring and maintaining playbooks and other process/governance documentation.
Working knowledge of network fundamentals such as VPN, LAN, WAN, wireless network, network topologies, and access methods, switches, routers, protocols, and services such as OSI model, IPv4, IPv6, name resolutions, networking services, TCP/IP
Working knowledge of administering MS Windows or Linux, including aspects such as application servers, web services, remote access, Active Directory, and performance monitoring
Familiarity with the mechanics of adversary behaviors and MITRE ATT&CK ®
Outstanding communication skills, both written and verbal, including the ability to communicate technical concepts in a clear, succinct fashion to subject matter and non-subject matter experts alike.
Strong analytical and problem-solving skills, including the ability to synthesize complex and contradictory information.

Provide leadership for a team of security analysts and specialists, including coaching, development, succession planning, recruitment, and performance assessment.
Oversee and ensure the integration of technology, processes, and governance frameworks to proactively identify, investigate, and mitigate current and emerging security threats targeting UFA’s business operations.
Provide leadership during security incident investigations, acting as operations lead to support incident containment and remediation as required.
Develop on-going operational enhancements of cyber security operations including alerting, monitoring, vulnerability management, and detection across multiple security domains.
Proactively identify and champion the development and implementation of innovative methods, processes, and technologies to enhance our security posture and align with enterprise objectives.
Monitor external threat intelligence and vulnerability feed, conduct research on emerging threats, and identify and deploy solutions to prevent such threats.
Assist the Director of Cyber Security & IT Compliance with the team’s strategic planning and goal setting.
Contribute to the definition, development, and oversight of the enterprise cyber security management strategy and framework.
Produce security reports and communicate actionable insights based on analysis for both technical and non-technical audiences.
Other duties as required