Manager, Cyber Security Incident Response

UNSW International; Sydney; Hybrid; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Flexible Working Options

Career development opportunities

17% Superannuation contributions and 2

Additional leave during festive period

Job summary

University of New South Wales is seeking a Manager, Cyber Security Incident Response to lead a CSIRT in a hybrid Sydney-based role. You will manage major incidents, drive threat intelligence and forensics, and coordinate with partners and MSSPs to safeguard systems.

The role reports to the Head of Cyber Security Operations, with a team of specialists reporting to you. Excellent communication and leadership are essential for a proactive security program.

Qualifications

• A relevant tertiary qualification with subsequent relevant experience or equivalent competence.
• Minimum ten years of industry experience in cyber security incident response, with a minimum three years of management experience in a cyber security environment or in a senior support role.
• Strong technical skills in security controls including network, endpoint, application security, data protection and identity management.
• Analytical and problem-solving skills with initiative and proactive solution development.
• Strong written and verbal communication with attention to detail.

Responsibilities

• Lead and mentor a team of incident response specialists across major incidents, threat hunting, threat intelligence and forensics.
• Ensure resources are appropriately allocated and incidents are coordinated with stakeholders.
• Maintain incident reports, playbooks, procedures, escalation processes and response plans.

Skills

Cyber security incident response

Threat intelligence

Threat hunting

Interpersonal communication

Stakeholder collaboration

Education

Tertiary qualification

Tools

SIEM

EDR

SOAR

Job description

Manager, Cyber Security Incident Response

University of New South Wales – Kensington NSW

• Full-time continuing role as Manager, Cyber Security Incident Response
• Excellent salary package available
• Kensington, Sydney location, 2-3 days in the office, Hybrid working

With a significant uplift within our Cyber teams, this role of Manager, Cyber Security Incident Response will lead an experienced CSIRT team responsible for managing all aspects of the incident response process operating within a hybrid operating model working closely together with our Managed Security Service Providers (MSSP). The position requires expert knowledge and significant experience in:Cyber security incident management and response, digital forensics, threat intelligence and threat hunting, cyber security frameworks, security technologies and automation including SIEM, EDR and SOAR, and Security Operations Centre service delivery.

We need someone who has exceptional interpersonal skills, enabling effective communication and collaboration with partners, vendors, and both internal and external stakeholders. The role will also develop and maintain incident reports, playbooks, procedures, escalation processes, and response plans aligned to best practices. The role reports directly to the Head of Cyber Security Operations. There will be a team of Specialists reporting to the Manager, Cyber Security Incident Response.

Some accountabilities:

Lead and mentor a team of incident response specialists, overseeing major incident response, threat hunting, threat intelligence, and digital forensics services within a hybrid operating model.Foster team development and collaboration ensuring high standards of performance in delivering these critical services.Manage investigations and ensure resources are appropriately assigned to perform actions in partnership with all relevant stakeholdersManage and co-ordinate incident response activities between UNSW and external partners.Act as an escalation point for major security incidents impacting the organisation, coordinating communications and response activities together with other operations teams.Actively participate in crisis management efforts, ensuring alignment between incident response, business continuity, and executive leadership to minimise impact and expedite recovery.Accurately document all actions taken during an incident, preparing detailed technical reports and executive summaries in alignment with established processes, standards, and frameworks.Present security reports on a regular basis analysing trends, patterns, and insights to provide recommendations.Provide regular updates on all aspects of the incident management function to ensure issues, risks, and problems are addressed in a timely manner and services are operating effectively following a continuous improvement model.You will be required to be available on-call roster for emergencies.

Who you are:

• A relevant tertiary qualification with subsequent relevant experience or equivalent competence gained through any combination of education, training, and experience.
• Minimum ten years of industry experience in cyber security incident response, with a minimum three years of management experience in a cyber security environment or in a senior support role.
• Strong technical skills and operational experience in the management, configuration, and support of security controls including network security, endpoint security, application security, data protection, and/or identity and access management.
• Comprehensive analytical and problem-solving skills and proven capacity to exercise initiative, flexibility and to be proactive in development of robust solutions to problems.
• Strong consultation, influencing and negotiation skills and proven ability to engage effectively with diverse stakeholders to achieve successful outcomes.
• Strong written and verbal communication skills, with a high level of attention to detail for deliverables produced.
• Demonstrated success working effectively and collaboratively on initiatives with a range of people at different levels within an organisation.
• Excellent time management skills, with a demonstrated ability to respond to changing priorities, manage multiple tasks and meet competing deadlines by using judgement and initiative.
• Relevant industry certifications such as CISSP, CISM, GCIH, GCFA are highly desirable but not required.
• An understanding of and commitment to UNSW’s aims, objectives and values in action, together with relevant policies and guidelines.

Benefits and Culture -

• Flexible Working Options (work from home, flexible hours etc)
• Career development opportunities
• 17% Superannuation contributions and additional leave loading payments
• Additional 3 days of leave over Christmas period
• Discounts and entitlements (retail, education, fitness)

For further details on the benefits, please visit https://www.jobs.unsw.edu.au/lifestyle-benefits

Please note: Sponsorship is not available for this role; valid Australian working rights are required on application.

Pre-Employment Checks-As part of our recruitment process candidates may be required to undergo pre-employment screening, which may include reference checks, qualification verification, right-to-work verification, and criminal history screening where relevant to the role.

Applications close: Sunday 22nd of Nov at 11.30pm

UNSW is committed to equity diversity and inclusion. Applications from women, people of culturally and linguistically diverse backgrounds, those living with disabilities, members of the LGBTIQ+ community; and people of Aboriginal and Torres Strait Islander descent, are encouraged. UNSW provides workplace adjustments for people with disability, and access to flexible work options for eligible staff.