Manager, IT Security Incident Response

Current Employees:

If you are a current Staff, Faculty or Temporary employee at the University of Miami, please click here to log in to Workday to use the internal application process. To learn how to apply for a faculty or staff position using the Career worklet, please review this tip sheet.

The University of Miami Health System, "UHealth", IT Department has an exciting opportunity for a Full-time Manager, IT Security of Incident Response to work hybrid in South Florida.

The Manager, IT Security of incident response will develop, maintain, or support an intelligence capability to identify current and emerging IT security risks to the organization, and is responsible orchestrating the security incident response activities. The manager will, in an ongoing basis, assess security controls to identify, prevent, and recover from cybersecurity attacks.

Core Responsibilities:

• Leads the security incident response operations, monitoring, and incident response activities.

• Review and update incident response standards, policies, and procedures.

• Performs necessary investigation, analysis, and evaluation to determine project feasibility.

• Documents root cause analysis, security events, and incidents.

• Develop and maintain the IT security incident response process, including all required supporting materials.

• Develop functional requirements for roles that will be involved in the CSIRT program.

• Work with business units, IT functions and external providers to ensure that the process is mutually understood and agreed on, and that responsibilities are clear and accepted.

• Act as a liaison between the security incident response team, enterprise IT services, and business units as needed.

• Initiate the IT security incident response process and execute decision authority to the extent of the role within that process.

• Ensure execution of the incident response process to the resolution of the incident. Ensure generation, maintenance, and protection of required incident records, such as investigator journals.

• Organize, participate in and, if required, chair post incident reviews for presentation to the senior management.

• Experience with Unix/Linux, or work relating to OS internals or file level forensics.

Department Specific Functions:

The IR manager must have in-depth knowledge of the following:

• Methods and motivations adopted by hackers to attack IT platforms and automated information systems.

• IT security incident management processes and tools.

• IT operations and support organizations.

• IT security risk assessment.

• IT security forensic techniques, tools, and procedures.

• Serve as a leader for the Cybersecurity Incident Response Team (CSIRT).

• Coordinate all cross-team collaboration, communication, and documentation activities related to responding, containing, and remediating cybersecurity events and incidents.

• Partnering closely with other functions within the cybersecurity and IT Management teams, and Collaborate with MSSP (Managed Security Services Provider) to ensure consistent and quality Incident Response services are provided to the organization.

• Manage the day-to-day operations for event and Incident management activities.

• Ensure deadlines are met incident response goals and initiatives are successfully implemented.

• Oversee all people-management activities for direct reports, including responsibility for establishing goals and providing mentorship for team.

• Develop KRIs, performance metrics and dashboards.

• Regularly interact with senior leadership and other business units.

• Knowledge of IT end-to-end problem management and root cause analysis, which is desirable.

• As a Manager, IT Security of Incident Response you will be based in South, Florida. We pride ourselves on providing locational flexibility.

This list of duties and responsibilities is not intended to be all-inclusive and may be expanded to include other duties or responsibilities as necessary.

CORE QUALIFICATIONS:                                           

• Bachelor's degree from an accredited college or university in Computer Science, Ma