Cybersecurity incident response lead (Italia)

Cybersecurity incident response lead (Italia)

01 ago
|
Fineco Bank
|
Italia

01 ago

Fineco Bank

Italia

Fineco Bank is a leading European bank with 20 years of history and a fully digital, branchless approach. We offer a wide range of products including trading, investment and payment services, a proprietary trading/investment platform, and banking solutions for domestic and international demand. Position We are looking for a Cybersecurity Incident Response Lead to join the ICT & Cybersecurity department. This role heads the end‐to‐end IR program, leads incident response coordination, and provides clear status to management. The lead works closely with SOC, technical teams, and governance functions, orchestrating contributions from teams not directly reporting to Cybersecurity. The role is not SOC shift management nor purely forensic or compliance. The focus is coordinating incident response, maturing the IR program, orchestrating involved technical teams, and turning cyber events into operational decisions, manager communication, and audit‐ready evidence. Principali Attività Guide operational coordination of security incident response: triage, containment priority,



reconstruct initial vector, kill chain, propagation, blast radius, and coordination of eradication and recovery with owner teams. Maintain an operational timeline and structured decision log during incidents, tracking hypotheses, containment decisions, owners, available evidence, and residual risks. Build, maintain, and test the IR program: playbook, runbook, escalation procedures, roles and responsibilities, incident classification criteria, and continuous improvement mechanisms. Contribute to the evolution of detection and response capabilities, defining requirements with the SOC based on real incidents, tabletop exercises, threat intelligence, and improving SIEM/SOAR/EDR/XDR workflows. Integrate threat intelligence into the IR cycle: translate indicators of compromise, TTPs and threat scenarios into concrete detection, hunting, containment, and hardening actions. Conduct structured post‐incident reviews

📌 Cybersecurity incident response lead (Italia)
🏢 Fineco Bank
📍 Italia

Candidati a questo annuncio

Mostra le tue capacità professionali all'azienda, compila il form e lascia un tocco personale nella lettera di presentazione, aiuterà il recruiter nella scelta del candidato.

Iscriviti a questa job alert:

Ricevi via email le nuove offerte di lavoro per: cybersecurity incident response lead (italia) / italia

Iscriviti a questa job alert:

Ricevi via email le nuove offerte di lavoro per: cybersecurity incident response lead (italia) / italia