PenFed Credit Union IT Security Incident Manager in McLean, Virginia
Overview Are you looking to take your career from good to great? As an employee of PenFed, every day is an opportunity to thrive, and be part of a team working to ensure our organization is providing world class service to our members, employees, and our communities. We exist to help our members realize their full potential, educate and encourage their dreams, and make every effort to follow our mission and help our members “do better.” Joining PenFed is more than being an employee; it’s about being a part of the PenFed family. PenFed is hiring an IT Security Incident Manager at one of the following locations: McLean, Virigina; Chantilly, Virginia; San Antonio, Texas; Omaha, Nebraska. The primary purpose of the IT Security Incident Manager is to provide organizational incident management and team coordination providing near real-time security monitoring, leveraging shared services and information across all services. The team is further responsible for enabling situational awareness of cyber-related information, events, incidents, trend analysis, metric development, and vulnerability information dissemination. The Security Incident Manager facilitates and coordinates enterprise situational awareness and response across partners for all cybersecurity related concerns while in steady-state phase. This role will manage the IT Security case management system and process and provide collaborative situational awareness to the various lines of business and networks suspect of cyber-threats/attacks. Responsibilities Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. This is not intended to be an all-inclusive list of job duties and the position will perform other duties as assigned. Manage High-Severity and Major Investigations / Incidents as well as coordinate cyber, infrastructure and application teams to enable and expedite root cause analysis and risk mitigation. Facilitate communications during these incidents, including verbal/written executive level status, running related conference calls, and acting as a liaison with business stakeholders. Provide verbal and written status updates to all stakeholders. Facilitate daily, weekly, and monthly meetings related to incident, investigations, vulnerabilities, and other risks. Coordinate, monitor, and support general activities related to cases, investigations and risk mitigation and analysis. Analyze incidents and events captured in the case management data for trends, patterns, or actionable information. Coordinate, communicate, share information, and work closely with various business units and teams within the company. Review incidents and events captured in the case management data after closure for investigative sufficiency and timeliness. Assist in developing incident and case reporting (volumes, KPIs, mean times to identify/ triage/ restore/ Resolve-Close/SLA compliance) to show performance within the environment. Interact with IT and business stakeholders, including PenFed Senior Management. Provide after-hours on call support for high severity Incident and problem resolution. Qualifications Equivalent combination of education and experience is considered. Bachelor’s Degree in information security / technology or related field, or equivalent combination of education & experience in information security in a large, highly regulated enterprise. Minimum of eight (8) years of progressively responsible experience in Cybersecurity, InfoSec, Security Engineering, Network Engineering with emphasis in cybersecurity issues and operations, computer incident response, systems architecture, data management. Excellent interpersonal, organizational, writing, communications, and briefing skills Strong analytical and problem-solving skills. High proficiency creating and presenting management reports. Supervisory Responsibility This position will not supervise employees. Licenses and Certifications Must have at least two (2) certifications in the field of information security from a respectable security organization. Desirable certifications include, but not limited to: GSEC, GCIH, GCIA, GCFE, GREM, GCFA, CEH, CISSP, CASP or equivalent Certifications Work Environment While performing the duties of this job, the employee is regularly exposed to an indoor office setting with moderate noise. *Most roles require working in an office setting with moderate noise and the ability to lift 25 pounds. * Travel Ability to travel to various worksites and be on-call is required. Special Message Regarding COVID 19 PenFed is continuing to hire and train exceptional individuals to help us serve our 2 million members both here and around the world. In light of the current situation with novel coronavirus (COVID-19), we have modified our hiring, onboarding, training, and deployment protocols in order to comply with current local and state guidance around social distancing. About Us Established in 1935, PenFed today is one of the country’s strongest and most stable financial institutions with over 2 million members and over $26 billion in assets. We serve members in all 50 states and the District of Columbia, as well as in Guam, Puerto Rico and Okinawa. We are federally insured by NCUA and we are an Equal Housing Lender. We are available to members worldwide, via the web, seven days a week, twenty-four hours a day. We provide our employees with a lucrative benefits package including robust medical, dental and vision plan options, plenty of paid time off, 401k with employer match, on-site fitness facilities at our larger locations, and more. Equal Employment Opportunity PenFed management will maintain and observe personnel policies which will not discriminate or permit harassment or retaliation against a person because of race, color, creed, age, sex, gender, gender identity, gender expression, religion, national origin, ancestry, marital status, military or veteran status or obligation, the presence of a physical and/or mental disability or medical condition, genetic information, sexual orientation, and all statuses protected by applicable state or local law in all recruiting, hiring, training, compensation, overtime, position classifications, work assignments, facilities, promotions, transfers, employee treatment, and in all other terms and conditions of employment. PenFed will also prohibit retaliation against individuals for raising a complaint of discrimination or harassment or participating in an investigation of same. PenFed will also reasonably accommodate qualified individuals with a disability so that they can apply for a job or perform the essential functions of a job unless doing so causes a direct threat to these individuals or others in the workplace and the threat cannot be eliminated by reasonable accommodation or if the accommodation creates an undue hardship to PenFed. Contact human resources (HR) with any questions or requests for accommodation at 240-224-4256.