Global Incident Commander-Manager

Job Description :

Job Title: Global Incidence Commander-Manager
Experience 8-10 Years
Qualification BE / B. Tech / M. Tech - Computer Engineering
Role & Responsibilities:

Key responsibilities include:

• Drive end-to-end GSOC service delivery across global regions, ensuring consistent security operations and incident response.
• Lead log source onboarding and integration to enhance enterprise-wide security visibility.
• Develop, tune, and govern detection use cases to improve threat detection accuracy and reduce false positives.
• Manage cross-functional cybersecurity programs, ensuring timely delivery and stakeholder alignment.
• Define and monitor KPIs and SLAs to measure operational performance and risk posture.
• Collaborate with cybersecurity, risk, and control teams to drive remediation and resolve operational gaps.
• Identify and implement process improvements to optimize GSOC workflows and service efficiency.
• Conduct service delivery assessments and prioritize strategic improvement initiatives.
• Ensure compliance by aligning GSOC operations with industry standards, regulatory requirements, and best practices.
• Monitor evolving cyber threats, regulatory changes, and organizational priorities to strengthen GSOC operations.

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Engineering, Business Administration, or a related discipline, with equivalent professional experience.
• 8-10 years of experience in cybersecurity operations, security service delivery, program management, or risk management within enterprise or financial services environments.
• Strong expertise in GSOC operations, including log ingestion, SIEM management, use case development, threat detection, incident response, and security monitoring.
• Proven ability to lead strategic initiatives, manage cross-functional programs, and deliver executive-level reporting and governance updates.
• In-depth understanding of cybersecurity frameworks and threat models, including MITRE ATT&CK and the Cyber Kill Chain.
• Demonstrated analytical thinking and creative problem-solving skills to address complex security and operational challenges.
• Experienced in developing operational dashboards, KPI reporting, trend analysis, and management metrics to support informed decision-making.
• Skilled at preparing executive briefings, coordinating global stakeholders, and facilitating collaboration across geographically distributed teams.
• Track record of improving operational efficiency through process optimization, automation, and technology-driven innovation.
• Excellent written and verbal communication skills, with the ability to effectively engage both technical and business stakeholders.

Skills Required
Incident Response, Security Monitoring, Process Optimization, Trend Analysis, Automation, KPI Reporting