Head of Cyber Defend / CERT

A Head of Cyber Defend is required for this CNI organisation based in the Midlands.

Practitioner CERT capabilities and several team management experience is required – meaning you will be technically capable and experienced within Incident Response & Detection, Threat Intelligence & Hunting, Vulnerability Management, Attack Surface Reduction, Cyber Analysis, etc. You will also have large team leadership and motivation experience in some of or all of the above areas. You will also have experience in strategic responsibilities – further developing and massaging strategy, including updating policies, procedures, and playbooks to respond to cyber threats.

Develop and maintain cyber strategy, capabilities to stay ahead of emerging threats.

Lead the Cyber Defence response for the organisation when under cyber-attack.

Lead and manage multiple cyber security teams.

Engage with stakeholders, report to snr management and collaborate with external partners.

Lead the CSOC in monitoring and detecting cyber security threats and incidents in real-time.

Collaborate with teams to conduct incident investigations and develop response plans.

Lead proactive threat hunting initiatives.

Manage vulnerability assessments and penetration testing programs.

Develop and maintain threat intelligence capabilities.

Essential experience includes:

Extensive experience in managing cyber security teams and programs.

In-depth knowledge of incident response, threat detection, and threat intelligence.

Proficiency in cyber security tools, technologies and standards.

Strong leadership, project management and communication skills.

Analytical thinking, problem-solving, and decision-making abilities.

Experience in red teaming, threat modelling and advanced adversarial simulation.

Familiarity with national and international cyber security standards.

Knowledge of cloud security, IoT security, and emerging technologies.

Extensive experience in cyber security leadership and management.

Proven experience in leading multiple cyber security teams and programs.

Ideally familiar with CNI and OT technology, including SCADA, ICS, and PLC systems