Incident Response Coordinator in London

As part of the Global Cybersecurity Incident Management (GCIM) team you will coordinate containment, eradication and post-incident activities for critical cyber security incidents. You will play a key role in the Incident Response Team (IRT) overseeing, validating and documenting containment acting as a point of escalation for our Global Security Operations Center (GSOC). Following security incident containment & recovery you will be responsible for engaging with key stakeholders for any Root Cause Analysis (RCA) and post-incident activity, ensuring we have reduced the chances of incident recurrence and assessed the efficiency of our incident response techniques and procedures. What Part Will You Play?

Coordinate incident response in line with the corporate security incident response plan. Manage post-incident activity to include scheduling and chairing Post Incident Reviews (PIR), the documentation of Root Cause Analysis and the tracking of actions to prevent incident recurrence. Provides 24x7 on-call incident management support on rotation for critical security incidents. Stays up to date with new and emerging threats that can affect the organisation's information assets, third party software/solutions, IT configuration changes, and network/system. Provides executive level written communication during incident response for inquiries related to security incidents or assigned cases. Coordinate the remediation of findings from the organisation’s Bug Bounty Program working directly with whitehat researchers. Works closely with Risk Management teams to document identified risks and issues highlighted through post-incident or root cause analysis activities. Maintains a working knowledge of key data security frameworks and regulations such as PCI (