IT Security Incident Response Leader

University of Miami - Miami, FL

Full-time - Mid Level

Miami, FL

Educational Services

About the position

The IT Security Incident Response Leader at the University of Miami Health System will oversee proactive incident detection, response, and recovery efforts within the Information Technology Department. This role involves developing and implementing incident response strategies, managing a team of cybersecurity professionals, and ensuring compliance with industry standards and best practices to enhance the organization's security posture. The leader will also focus on continuous improvement through incident analysis and threat hunting.

Responsibilities

• Supervises the performance management of all assigned staff including hiring, training, evaluation, promotion, and termination decisions.
• Manages daily operations and directs staff to achieve departmental goals and objectives.
• Acts as liaison between industry peers, government agencies, and other specialists.
• Utilizes commercial intelligence providers to gain insight into adversary tactics and emerging threats.
• Coordinates with Security Operations to identify and assess security incidents.
• Advises IT Leadership of significant emerging threats and recommends strategic and tactical countermeasures.
• Establishes departmental goals and objectives, identifies areas for improvement, and implements action plans.
• Develops and delivers tabletop preparedness exercises annually.
• Leads quarterly reviews of the incident response plan to ensure accuracy with organizational changes.
• Attends professional meetings and workshops to stay updated on technological advancements.
• Establishes and assesses the effectiveness of internal controls and compliance with University policies.
• Ensures employees are trained on controls and University policies.
• Develops and maintains the security incident response process and supporting materials.
• Develops functional requirements for roles involved in the CSIRT program.
• Acts as a liaison throughout the organization to ensure mutual understanding of the incident response process.
• Initiates the security incident response process and executes decision authority within that process.
• Ensures execution of the incident response process to resolution.
• Ensures generation, maintenance, and protection of required incident records.
• Organizes and participates in post-incident reviews for senior management presentation.
• Delivers threat intelligence collected from incident engagements to relevant teams.
• Provides specialized security support for events outside the security incident realm.
• Organizes day-to-day management of the CSIRT, including staffing and budgeting.

Requirements

• Bachelor's degree in a relevant field.
• Certified Information Systems Security Professional (CISSP).
• Certified Information Security Manager (CISM).
• GIAC Certified GIAC Forensic Analyst.
• CERT Incident Response Process Professional Certificate.
• Security + Certified Ethical Hacker.
• Cloud Security certification.
• Minimum 7 years of relevant experience in security incident management processes and tools.
• Experience with security risk assessment processes and forensic techniques for on-premises and cloud environments.
• Strong communication skills to interact with technical staff and senior management.
• Proven ability to build relationships and influence individuals at all levels.
• Strong organizational skills and ability to manage multiple priorities under pressure.
• Ability to synthesize intelligence about actors and techniques to identify emerging risks.
• Strong analytical and problem-solving skills.
• Proficiency in process formulation and improvement.

Nice-to-haves

• IT end-to-end problem management and root cause analysis experience.
• Experience working in a fast-paced, complex, dynamic, multicultural business environment.

Benefits

• Competitive salaries
• Comprehensive benefits package including medical and dental insurance
• Tuition remission
• Paid time off