Head of Cyber Incident Response (Hybrid setup)

Join a team of cybersecurity professionals and help Swiss Re to fulfil its mission in making the world more resilient. As a Cyber Incident Response Manager, you'll be responsible for ensuring Swiss Re is prepared to respond to major cyber-attacks. You will also be responsible for ensuring Swiss Re executes an effective response through coordination of and liaison with stakeholders and resolver groups and ensuring actions and findings are documented and tracked through to completion.

About the Role and Team

Cyber Defence is the focal point for all cyber security activities across Swiss Re. We are responsible for keeping the company safe – by going the extra mile in terms of preciseness and diligence. Cyber Defence Operations is responsible for maintaining security operations, focused on delivering high-quality monitoring and response solutions. We're looking for an experienced cybersecurity professional who'll use their creative thinking and project management experience to improve and manage our response to cyber-attacks.

In your role, you will…

• Lead both technical and non-technical response efforts for significant cyber-attacks impacting Swiss Re, ensuring stakeholders at multiple levels of seniority are briefed and engaged on the ongoing incident.
• Develop the Incident Response capability and associated best practices.
• Lead a global team of incident managers, ensuring round the clock support for cyber incidents.
• Ensure that processes for tracking actions and findings identified during and after a cyber-attack are effective.
• Conduct post incident reviews to identify root causes and lessons learned, as well as, assist in writing and reviewing incident reports.
• Liaise with Risk and Governance teams to track finding through to completion.
• Work with other appropriate teams to ensure fully documented and complimentary Cyber Incident Response and Emergency Management Team plans.
• Help coordinate regular tabletop exercises across all levels of the Swiss Re Group up to and including working with the executive committee to prepare them to respond to cyber-attacks.
• Ensure that threat intelligence identified during cyber-attacks is fed back into the Threat Intelligence team for appropriate analysis and dissemination.
• Be expected to respond out of normal business hours if the need arises.

About You

• Previous work experience in cyber security as an incident responder or security analyst
• Previous experience managing teams or activities in high pressure and dynamic situations.
• Experience and or qualifications in technical project management
• Experience and comfortable working with diverse stakeholders including but not limited to; Legal, Risk, C-Suite members, IT, Data Protection, and Media Relations
• Excellent English oral and written communication skills; a second language (German, Spanish, or Chinese) would be beneficial
• Excellent analytical skills and an ability to document identified actions in a very high pressure, fast paced, dynamic, and international working environment
• An understanding of Cyber Threat Intelligence gathering and evaluation techniques