Security Incident Lead Castelo Branco

Security Incident Lead
Castelo Branco
Castelo Branco, Castelo Branco, Portugal

Role Overview

As the Security Incident Lead, you will collaborate with the Head of Security Operations, Security Operations Centre, the broader security teams and other technology and business stakeholders to lead the response to security incidents.

Your role is critical in ensuring a structured and consistent response is taken to security incidents, and the development and testing of incident response playbooks.

What You Will Do

• Act as the lead for security incident management - the information security point of engagement for the Major Incident Management team, and the coordination point for resources.
• Ensure team members and stakeholders are engaged to effectively enable security incident response.
• Ensure runbooks are followed and incident actions are appropriately documented.
• Support the Head of Security Operations and CISO on any major security incidents.
• Oversee the development and maintenance of incident response playbooks and runbooks for common / expected security incidents.
• Drive problem management for security incidents and ensure appropriate lessons learned, action tracking and continuous improvement.
• Provide reporting and statistics on security incidents.