Incident Response Coordinator

APPLY NOW »

Date: Dec 10, 2018

Location: Jersey City, NJ, US

Company: New York Life Insurance Co

 

A career at New York Life offers many opportunities. To be part of a growing and successful business. To reach your full potential, whatever your specialty. Above all, to make a difference in the world by helping people achieve financial security. It’s a career journey you can be proud of, and you’ll find plenty of support along the way. Our development programs range from skill-building to management training, and we value our diverse and inclusive workplace where all voices can be heard. Recognized as one of Fortune’s World’s Most Admired Companies, New York Life is committed to improving local communities through a culture of employee giving and service, supported by our Foundation. It all adds up to a rewarding career at a company where doing right by our customers is part of who we are, as a mutual company without outside shareholders. We invite you to bring your talents to New York Life, so we can continue to help families and businesses “Be Good At Life.” To learn more, please visit LinkedIn, our Newsroom and the Careers page of www.NewYorkLife.com.

 

The Incident Response Specialist is a key function of the Computer Security Incident Response Team (CSIRT) reporting to the CSIRT Manager. The CSIRT Specialist will utilize their background in regulatory and governance frameworks, technology, and incident response procedures to act as a subject matter expert in Cybersecurity Incident Response, and either assist the senior incident manager or manage incident response actions with minimal guidance. The Specialist will leverage subject matter expertise to assist in performing ad-hoc current state maturity assessments, working with team members and enterprise stakeholders in the development and maintenance of the organization's Cyber Incident Response Program, including documentation, execution and maintenance of processes, and implementation and use of technologies to create efficiencies within existing capabilities. The Specialist will be adept in incident and crisis management, able to assert authority and calm in stressful situations, leveraging established and ad-hoc process response to guide response efforts in alignment with industry best practices, regulatory compliance, and legal obligation.

 

  • Performs incident analysis to identify and classify cyber security incidents with minimal guidance
  • Responds to computer security incidents according to established response processes, leverages other team members and subject matter expertise where established processes do not exist
  • Acts as a subject matter expert regarding CSIRT incident response processes
  • Assists and provides guidance to other stakeholders during the incident response process
  • Provides timely and relevant updates to appropriate stakeholders and decision makers
  • Validates and maintains incident response plans and processes
  • Compiles and analyzes data for management reporting and metrics
  • Analyzes potential impact of new threats and communicates risks via appropriate channels
  • Stays up to date on current attack trends through independent research
  • Provides advice and guidance to the business regarding CSIRT best practices

 

Functional Knowledge: Basic understanding of financial regulatory issues with respect to cyber security and emerging privacy laws. An ability to communicate complex and technical issues to diverse audiences, orally and in writing, in an easily understood, authoritative, and actionable manner.
Problem Solving: Ability to consume and synthesize intelligence about threat actors, techniques, and situations to identify emerging risk scenarios. Knowledge of end-to-end IT problem management and root cause analysis in large enterprise environments.
Decision Making/ Nature of Impact: Understanding of IT Service and Delivery Management model, and an ability to perform independent analysis of complex problems by distilling relevant findings and root causes. Must be comfortable making decisions in a volatile, uncertain, complex, and ambiguous environment.
Communication Requirements: Ability to communicate complex technical concepts and situations to diverse audiences both orally and in writing in an easily understood, authoritative, and actionable manner. Able to present a command presence as a subject matter expert during crisis situations to manage conversation flow regarding cyber incidents.

 

  • BA/BS degree in engineering or equivalent experience

 

SF: LI-CC1

 

EOE M/F/D/V

 

If you have difficulty using or interacting with any portions of this Web site due to incompatibility with an Assistive Technology, if you need the information in an alternative format, or if you have suggestions on how we can make this site more accessible, please contact us at: (212) 576-5811.


Nearest Major Market: New York City
Nearest Secondary Market: Newark

Job Segment: Engineer, Social Media, Risk Management, Cyber Security, Engineering, Marketing, Finance, Security