Global Incident Response Coordinator — 24x7 On-Call

Global Payments; Atlanta (GA); On-site; USD 110,000 - 160,000; Full time

Job summary

Global Payments is seeking a seasoned cybersecurity incident management professional to join the GCIM team. You will coordinate containment, eradication, and post-incident activities for critical cyber security incidents and serve as a point of escalation for the GSOC.

You will lead and document root cause analyses, track remediation actions, and ensure lessons learned are applied to reduce recurrence. The role includes on-call duties, rapid stakeholder communication, and collaboration with Risk

Qualifications

• Relevant Experience or Degree in: Bachelor's degree in Computer Science, Info Security, or related field. Or relevant work experience in a related field.
• Typically Minimum 2 Years Relevant Experience with Incident Management or Incident Response
• Knowledge of network operations or engineering or system administration on Unix, Linux, MAC, or Windows; common security operations, intrusion detection systems, Security Incident Event Management systems, Penetration Testing, Web Application assessment, Secure Coding practices, Cloud Technologies.
• Strong verbal and written communication skills.
• Demonstrated ability to effectively communicate ideas and persuade others to accomplish challenging goals and objectives.
• Ability to facilitate meetings and enable discussions that lead to resolution and communicate results.
• Skills / Knowledge - Developing professional expertise, applies company policies and procedures to resolve a variety of issues.
• Job Complexity - Works on problems of moderate scope where analysis of situations or data requires a review of a variety of factors. Exercises judgement within defined procedures and practices to determine appropriate action. Builds productive internal/external working relationships.
• Supervision - Normally receives general instructions on routine work, detailed instructions on new projects or assignments.
• Industry Knowledge - Continued self-education of new and emerging threats and relevant processes, controls, or technologies to mitigate them.
• Incident Response - Knowledge and skills to contribute to all phases of Incident Response.

Responsibilities

• Coordinate incident response in line with the corporate security incident response plan.
• Manage post-incident activity to include scheduling and chairing Post Incident Reviews (PIR), the documentation of Root Cause Analysis and the tracking of actions to prevent incident recurrence.
• Provide 24x7 on-call incident management support on rotation for critical security incidents.
• Stay up to date with new and emerging threats that can affect the organization's information assets, third party software/solutions, IT configuration changes, and network/system.
• Provide executive level written communication during incident response for inquiries related to security incidents or assigned cases.
• Coordinate the remediation of findings from the organization's Bug Bounty Program working directly with whitehat researchers.
• Work closely with Risk Management teams to document identified risks and issues highlighted through post-incident or root cause analysis activities.
• Maintain a working knowledge of key data security frameworks and regulations such as PCI, HIPAA, GDPR, PII, NIST CSF.
• Collaborate with Legal and Privacy Offices throughout the company on critical data protection/security incidents.
• Participate in reviews and assessments to provide recommendations to enhance or improve the security posture of environments as part of post incident activities and lessons learned.
• Maintain and follow runbooks for day-to-day incident response activities in line with the corporate security incident response plan.

Skills

Incident Response

Communication skills

Meeting facilitation

Threat awareness

On-call incident management

Unix/Linux knowledge

Cloud technologies

Education

Bachelor's degree in Computer Science/Info Security or related field

Tools

SIEM

Penetration Testing

Web App security

Security automation

Job description

Global Payments is seeking a seasoned cybersecurity incident management professional to join the GCIM team. You will coordinate containment, eradication, and post-incident activities for critical cyber security incidents and serve as a point of escalation for the GSOC.

You will lead and document root cause analyses, track remediation actions, and ensure lessons learned are applied to reduce recurrence. The role includes on-call duties, rapid stakeholder communication, and collaboration with Risk