Cirp Lead Montreal

Description:

MAIN RESPONSIBILITIES

• Support the Cyber Incident Commander(s) in the handling of major cyber incidents.
• Develop the strategy for the delivery of the CyberSecurity Incident Response Program (CIRP) in compliance with the priorities of InfoSec and its business partners (CCX, CMI, BZL, and CGO).
• Direct and coordinate the delivery of CIRP-related projects/initiatives (ensure close monitoring with the resources of the business units and InfoSec's strategy).

• Lead TableTop Simulation sessions with the EVPs, Business Unit Presidents and Board Committees (strategic level)

• Lead Tabletop exercises with the business units (tactical and operational level)

• Lead Intrusion testing activities with suppliers and the business units

• Lead Red Team activities with suppliers and the business units

• Maintain and update documentation related to the Incident Response Program (processes, diagrams, RACIs, playbooks, etc.)

• Organize resilience testing sessions at InfoSec and stakeholder levels

• Follow up on actions resulting from simulation sessions with the CTO and InfoSec Leader.

• Establish and develop close ties with the business units and the company's hierarchical layers.
• Lead and Collaborate with the different units' system managers (intrusion tests and Red Team exercises).
• Identify security trends in the different business units and align with the Cyber Incident Response Program (scenarios, resilience tests).
• Align and collaborate with InfoSec's governance, security architecture and SOC teams to update documentation in compliance with standards, best practices and operational lessons learned.
• Collaborate with the corporate Incident (Crisis) Management team to create processes that reflect the company and the structure of the different business units' incident management teams.
• Assume leadership of the delivery of projects/initiatives as well as relations with the business units.
• Identify issues and find solutions in complex environments.
• Prepare and produce reports on the activities of the CyberSecurity Incident Response Program. Develop and maintain the incident management protocol.
• Track the budget of the CyberSecurity Incident Response Program with each activity's service providers.
• Track the evolution of technology and act as an agent of change.
• Own relationships, contracts and contacts: pwc, KPMG, Norton Rose Fulbright.
• Serve as an incident scribe (Life-Cycle Reporting)