Cyber Incident Response Commander | CERT / SOC

Cyber Incident Response Commander | CERT / SOC

Amaris Consulting is looking for a Cyber Incident Response Commander to join the CERT of a global transport and logistics organisation.

This is an intermediate-level opportunity for a cybersecurity professional with experience coordinating security incidents, maintaining response processes and working with technical and business stakeholders during high-pressure situations.

Key responsibilities

• Act as Incident Commander for significant information-security incidents.
• Assess incident severity and formally declare major incidents when required.
• Coordinate technical, business, legal and communication teams.
• Manage incidents through containment, mitigation, recovery and reporting.
• Prioritize forensic activities and ensure effective collaboration between response teams.
• Maintain and improve Incident Response Plans, procedures and playbooks.
• Adapt response plans to different scopes, including ships, regions and subsidiaries.
• Document lessons learned and recommend process improvements.
• Establish relationships between incidents and identify recurring patterns.
• Prepare evidence and documentation for internal and external audits.
• Participate in CERT projects, Cyber Defense Center activities and compliance initiatives.
• Work with international and offshore teams across different regions.

Profile

• 4 to 6 years of experience in Cyber Incident Response, CERT, SOC, SecOps or GRC.
• Ideally 5+ years in roles involving similar responsibilities.
• Experience acting as an Incident Commander during cybersecurity incidents.
• Knowledge of incident-response methodologies such as NIST, ISO 27035 or the SANS six-step process.
• Understanding of SOC operations, security tools and digital-forensics techniques.
• Experience writing and maintaining Incident Response Plans and playbooks.
• Ability to communicate cybersecurity incidents clearly to management and executives.
• Relevant certifications such as GCFA, CIH, CISSP, CEH, ECSA or ITIL Foundation are an asset.
• Strong analytical, communication and decision-making skills.
• Ability to remain calm and structured during crisis situations.
• Professional fluency in English.
• Experience in transport, shipping or logistics would be an advantage.

If you are an experienced cybersecurity professional who can lead complex incidents and help improve enterprise response capabilities, please send us your updated CV.