Head of Cybersecurity Operations

The Bank for International Settlements (BIS) has an exciting opportunity available for a Head of Cybersecurity Operations to join the Corporate Security team in our Basel offices.

**By joining the Corporate Security team**
- You will join a group of security professionals that invests continually in the development of specialist knowledge and skills with the aim of responding to the dynamic business needs of the BIS.
- We pride ourselves on being able to design security solutions which are enablers for the ambition and innovation of the BIS mission.
- We are a committed and conscientious team that believes in a diversity of thought, meaning that we are open to new ideas and enjoy working with creative people.
- Our size means that your job won’t be narrow but will have the scope to demonstrate and develop expertise across the full range of security competencies, delivering the latest cloud security technologies in our hybrid Microsoft Azure environment.

**Purpose of the job**
- Responsible for leading Cybersecurity Operations (CSO), comprising the Security Operations Centre and Identity and Access Management (IAM) teams.
- Responsible for operations, including cyber defence, incident response and threat hunting.
- Provide core IAM operational security services, including rapid response resolution for all access permissions issues.
- Responsible for ensuring CSO’s operational security design requirements are considered when new IT solutions are engineered and architected.
- Represent CSO at the ORWG and WPSI and other technology management groups at the Bank. Lead vulnerability management initiatives, including monitoring of security configuration management.
- Produce reports and briefs for senior management on the operational cybersecurity posture of the Bank.

**Principal accountabilities**

Cyber Security Operations: Lead the CSO operations effectively in following functions:

- Incident management and response: Ensure identification and analysis of misuse, malware or unauthorized activity on monitored networks. Analyze and solve problems related to network, system, forensic and malware analysis. Recognize potential successful and unsuccessful intrusion attempts and compromises. Conduct thorough reviews and analyses of relevant events and report detail and summary information.
- Identity & Access Management operations: Supervise and organise the IAM operations across on-prem and cloud infrastructure
- Cybersecurity engineering: Embed security operations (cyber and IAM) into IT infrastructure projects and the design of new information management services.
- Cybersecurity analytics: lead the development of advanced cyber-security analytics for active monitoring based on deviation from behavioural baselines.

Management responsibilities: Lead a dedicated team of incident response handlers and identity management specialists.

**Qualifications, skills, and experience**
- Master’s degree or equivalent experience in computer sciences, demonstrating a high standard of mastery
- Demonstrable experience in a technical role leading issues related to cyber security, ideally with experience within a public sector agency or central bank, with demonstrated contact with external cyber defence agencies. Track record of ongoing technical education and/or professional expertise development in cybersecurity-related areas.
- Demonstrated experience leading incident response teams, with strong line managerial skills.
- Expert knowledge of cyber-security incident response activities.
- Good understanding of IAM technology and related processes.
- Strong hands-on analytical and data analysis skills, including the ability to automate through code.
- Good communication skills vis-à-vis both technical experts and senior management.
- Micro-credentials in incident response-related disciplines and technologies used by the Bank (for eg. GIAC, OSCP and Azure).
- Very good interpersonal skills and ability to communicate at all levels of the institution, including with senior management
- Ability to explain and clarify highly technical matters in a business-oriented way, to non-technical audiences
- Ability to rapidly acquire new technical knowledge and keep up to date with the latest developments and intrusions in cybersecurity
- Fluency in English is a requirement.

**Who we are**

**What the BIS offers