https://www.linkedin.com/jobs/view/2642035528/?refId=e6eafc26-669b-45a1-98fd-d84d659c6604

Security Operations and Cyber-Resilience Manager

Radisson Hotel Group

Spain, Europe

Role purpose: This position will be part of an international team and focuses on managing threats and ensuring our organization is ready to detect, respond and recover from cyber-threats and cyber-incidents in an effective manner as they occur, and help keep all our human teams, ready to face modern and changing cyber-threats. The Job will be based in Madrid. Responsibilities: Develop, maintain and own a threat model from the IT and business cyber-risks identified. Stay ahead of current threat landscape by integrating advisories, OSINT and threat intelligence into our situational awareness. , Manage our organizations vulnerable surface and ensure IT owners remediate known vulnerabilities according to their age and priority , Establish a Security Operational Monitoring strategy and lead the implementation of capabilities, services and detection processes required to have continuous visibility into anomalies and security events, to manage the threats that could affect our business and our brands. , Collaborate with other IT stakeholders to progressively integrate their applications and IT assets into the Security Operational Monitoring. , Over time, develop proactive cyber defense capabilities and increase the level of automation and orchestration of threat management lifecycle in our organization , Establish a Security Incident Response strategy, process and procedures, and lead the implementation of capabilities and services to support it, including digital forensic capabilities. Own, lead and coordinate cyber incident response work when required. , Establish and maintain the incident reporting process to the relevant authorities and official law enforcement bodies where applicable. , Help RHG train our capabilities in varying scenarios by putting in place diverse adversary simulations to ascertain our actual readiness level and turn them into feedback to further improve our Security Architecture and Control Framework, and feedback into our Risk Management. , Foster a workstream for security awareness and train our human force in detecting and avoiding threats targeting them (spear phishing, social engineering, etc.) , Provide real time updates on the threat management processes, in the form of meaningful KPIs and cyber defense situational awareness. Accountabilities: Manage RHGs ability to prevent, detect and effectively respond to cyber-threats as they occur, especially those specifically applicable to our industry. Also, make RHG a cyber-resilient organization by helping raise cyber-awareness at all levels and transversally in the organization and also improving over time our capabilities and procedures to respond and recover from cyber-incidents in order to preserve our business. Requirements: Education: Bachelors or Masters Degree in IT or related field, or equivalent work experience , +7 years of applied experience in Cyber defense, SOC, IR, offensive security , Applied transversal technical knowledge of different Cybersecurity domains: Identity and Access Management, Applications Security, Infrastructure (Data Center and Cloud) and Workplace protection, Data Security, Cyber defense: A minimum of 5 years of management responsibilities , Good oral and written communication skills, including the ability to explain Cyber Threats in business terms, establish rapport And Persuade Others. Good Relationship Building Skills: Change agent, result orientation, strategic planning , Fluent in English , Travel needs: Up to 25% , Highly desirable certifications: CEH, OSCP. CISSP is a plus 