Senior Manager Incident Response and Security Operations - PVH Corp.

Profile

POSITION SUMMARY: 

PVH is seeking a Senior Manager, Incident Response and Security Operations to join its Global Information Security Group (ISG). This position will be a vital leader of the Threat Response team, leading the Cyber Security Incident Response Team (CSIRT) activities and capabilities development with the support of SOC analysts and incident responders globally using a wide variety of tools. As the CSIRT leader, the candidate will be responsible for maturing and maintaining a global program that aligns with leading industry standards, advice, and direction. This involves operating and continually improving existing CSIRT processes, as well as the development of new processes in response to evolving threats and business requirements.

PRIMARY RESPONSIBILITIES/ACCOUNTABILITIES OF THE JOB: 

• Manage the PVH Global CSIRT Team and Threat Monitoring Program:

  • Oversee the continuous monitoring, identification, intake, triage, response, remediation, and resolution of security incidents while prioritizing incidents based on risk or exposure.

  • Responsible for a team of global SOC analysts who continuously perform monitoring and triage of collected information and alerts to determine what is actionable

  • Ensure continual development of full security incident management lifecycle, from incident analysis, coordination, response to remediation and reporting with planned table top exercises

• Overseeing the incident management process and team members involved in responding to and resolving the incident.

• Responding to a reported service incident, identifying the cause, and initiating the incident management process.

• Prioritizing incidents according to their urgency and influence on the business.

  • Producing documents that outline incident protocols such as how to handle cybersecurity threats.

• Expand the usage of security monitoring tools to improve the security of the environment based on business use cases or changes in threat landscape, root causes from security incident response, or output from security analytics

• Lead and improve security monitoring related functions

  • Perform deep forensic analysis to aid in finding threats/suspicious activities in the enterprise

  • Malware Reverse Engineering of new threats 

  • Perform in-depth analysis in support of network monitoring and incident response operations

  • Expertise with tools and processes used in security incident detection and handling

• Provide leadership and direction during major incidents as well as coordinating and facilitating all communications and escalations during the incident.

• Maintain authoritative control of the incident response process while maintaining an overall incident perspective and ensuring the Incident Management processes are followed.

• Produce clearly written post-incident reporting within agreed SLAs, assisting with After Action Reports (AAR) where required. Proactively monitor incident resolution, analyze, and highlight trends and root causes to Problem Management and/or relevant support teams.

• Lead problem review sessions and coordinates critical problem resolutions to root cause, ensuring all incidents are logged and relevant parties involved.

• Deliver results and achieve SLA/KPI performance by focusing on effective cross functional team collaboration and execution.

• Keep current with threat intelligence, vulnerabilities, attacks, and countermeasures and devote time to threat research and improving PVH’s defensive posture.

• Provide consultation on technical security topics to the various Information Technology groups within PVH.

• Lead efforts to streamline security operations in key areas including incident response, automation, and orchestration.

• Guide team members on development plans to ensure the continued growth of the SOC Analysts skills and capabilities.

________________________________________________________________

QUALIFICATIONS & EXPERIENCE:

Experience:   8+ years of technical security experience with 5+ years of experience managing and leading a cyber incident response or security operations team with an enterprise organization.

Education:   Bachelor’s degree in related field or equivalent experience

Certifications:  SANS GCIH, GSOC, GSOM, GCIA, GPEN, GMON, GCDA, GDAT or certifications relating to security operations or incident response preferred.

Skills: Strong understanding of incident response processes, workflows, communications and reporting, escalations, and cross-department collaboration.

,industry:Retail,title:Senior Manager, Incident Response and Security Operations - PVH Corp.,datePosted:2022-12-28T00:00:00.000 0000,@context:http://schema.org,occupationalCategory:Information Technology,educationRequirements:[],experienceRequirements:{@type:OccupationalExperienceRequirements,monthsOfExperience:60},responsibilities:As the CSIRT leader, the candidate will be responsible for maturing and maintaining a global program that aligns with leading industry standards, advice, and direction. This involves operating and continually improving existing CSIRT processes, as well as the development of new processes in response to evolving threats and business requirements. Manage the PVH Global CSIRT Team and Threat Monitoring Program. Oversee the continuous monitoring, identification, intake, triage, response, remediation, and resolution of security incidents while prioritizing incidents based on risk or exposure. Responsible for a team of global SOC analysts who continuously perform monitoring and triage of collected information and alerts to determine what is actionable. Ensure continual development of full security incident management lifecycle, from incident analysis, coordination, response to remediation and reporting with planned table top exercises. Overseeing the incident management process and team members involved in responding to and resolving the incident. Responding to a reported service incident, identifying the cause, and initiating the incident management process. Prioritizing incidents according to their urgency and influence on the business. Producing documents that outline incident protocols such as how to handle cybersecurity threats. Expand the usage of security monitoring tools to improve the security of the environment based on business use cases or changes in threat landscape, root causes from security incident response, or output from security analytics. Lead and improve security monitoring related functions. Perform deep forensic analysis to aid in finding threats/suspicious activities in the enterprise. Perform in-depth analysis in support of network monitoring and incident response operations. Provide leadership and direction during major incidents as well as coordinating and facilitating all communications and escalations during the incident. Maintain authoritative control of the incident response process while maintaining an overall incident perspective and ensuring the Incident Management processes are followed. Produce clearly written post-incident reporting within agreed SLAs, assisting with After Action Reports (AAR) where required. Proactively monitor incident resolution, analyze, and highlight trends and root causes to Problem Management and/or relevant support teams. Lead problem review sessions and coordinates critical problem resolutions to root cause, ensuring all incidents are logged and relevant parties involved. Deliver results and achieve SLA/KPI performance by focusing on effective cross functional team collaboration and execution. Keep current with threat intelligence, vulnerabilities, attacks, and countermeasures and devote time to threat research and improving PVH’s defensive posture. Provide consultation on technical security topics to the various Information Technology groups within PVH. Lead efforts to streamline security operations in key areas including incident response, automation, and orchestration. Guide team members on development plans to ensure the continued growth of the SOC Analysts skills and capabilities. ________________________________________________________________. ,directApply:true,skills:information technology, security incident response, escalations, problem management, team collaboration, security, orchestration, incident management, cross functional, incident analysis, technical security, automation, full security incident management lifecycle, remediation, incident response, kpi, operations, in-depth analysis, forensic analysis, slas, leadership, performance, analytics., soc, reporting, sla, facilitating, continuous monitoring, influence, aar, triage, threat intelligence, network monitoring, gsoc, incident reporting, coordination, security monitoring, incident management processes, exercises, cybersecurity, business requirements, security operations, development, root cause, incident management process, IT Security Analyst - Security Operations, IT Security Operations Center Analyst, Security Operations Analyst, Senior Security Analyst, Threat Vulnerability Management Professional - Analyst, Security Analyst, IT Security Analyst & Security Analyst & Network Security Analyst, Cybersecurity Analyst, Information Technology Security Analyst, Vulnerability Management Analyst} Senior Manager, Incident Response and Security Operations - PVH Corp. in Bridgewater, New Jersey, United States of America | Information Technology at PVH

Company info

PVH Corp
Website : http://www.pvh.com/