Senior Security Incident Manager GBR Posted

Location

London

Business Area

Legal, Compliance, and Risk

#

We Protect Bloomberg. The Bloomberg Security Incident Management (Sec IM) team provides consistent coordination and management of information security incidents and events across Bloomberg's diverse lines of business and vast global network.

Sec IM works closely with teams across Bloomberg, coordinating, commanding, and documenting responses for all security incidents and high-profile security events. The team is responsible for ensuring responses are efficient and comprehensive. The team also plays a key role in identifying methods to improve upon similar scenarios. Key partners include incident responders, threat intelligence, legal, vulnerability analysts, security program leads, and many other teams within the company.

A successful candidate will be focused on coordination, leadership, delegation, documentation, and identification of required response actions, rather than performing technical deep dives such as forensics or reverse engineering. You will be expected to fulfill common incident management roles in a security context where the goal is careful containment and remediation of incidents and events which could jeopardize the confidentiality, integrity, and/or availability of Bloomberg systems and records.

• Lead & focus
• Demonstrate clear and calm leadership, setting the tone for each response
• Command and coordinate a response to security incidents, relevant threats, and high-profile security events
• Scope a response to the next best actions
• Ensure response is sustainable for all resources involved
• Support beyond normal hours in an emergency or during times of staff shortage
• Coordinate & communicate
• Delegate tasks in a timely manner and manage them to closure or management handoff
• Facilitate incident / threat resolution through prompt communication across multiple teams
• Document status and regularly communicate updates to stakeholders and senior management
• Maintain and track key metrics and providing reporting related to incident management
• Work closely with global Sec IM staff (New York, Dublin, Sydney), ensuring continuous involvement
• Update and maintain procedures that effectively guide security incident management
• Participate in scenario analyses (e.g. tabletops, functional exercises, etc.)
• Participate in skill training
• Conduct Post Incident Review (PIR) to identify paths for improving response to similar scenarios, as well as security posture, delivering those requirements to appropriate stakeholders that handle short-, mid- and long-term remediation

• 3+ years working in a cyber incident management, cyber incident response, or urgent vulnerability remediation function(s)
• Understanding of the security incident lifecycle, including preparation, identification, containment, eradication, recovery, and post-incident review
• Experience acting as an Incident Commander, Incident Manager, or equivalent leadership role during an active security incident
• Proven ability to manage tasks during high-pressure, complex situations
• Clear and concise written and verbal communication skills
• Strong critical thinking and decision-making skills
• Ownership to identify problems and pursue solutions, individually and collaboratively
• Commitment to building strong people networks and collaborative relationships
• Effectiveness at using multiple communication styles during incidents
• Proven ability to multitask

• Experience with developing, maintaining, or improving incident management procedures, playbooks, or operational frameworks
• Experience communicating risk and…