Principal Analyst, Cyber Crisis and Exercise

Sony Corporation of America, located in New York, NY, is the U.S. headquarters of Sony Group Corporation, based in Tokyo, Japan. Sony's principal U.S. businesses include Sony Electronics Inc., Sony Interactive Entertainment LLC, Sony Music Entertainment, Sony Music Publishing and Sony Pictures Entertainment Inc. With some 900 million Sony devices in hands and homes worldwide today, a vast array of Sony movies, television shows and music, and the PlayStation Network, Sony creates and delivers more entertainment experiences to more people than anyone else on earth. To learn more: www.sony.com/en.
 

POSITION SUMMARY 

Sony Corporation of America (SCA), is seeking a Principal Analyst, Cyber Crisis and Exercises to join the Global Security Incident Response Team (GSIRT) within the Corporate Information Security Division (CISD) located in Reston,VA. This position will report to the Senior Manager, Cyber Crisis and Stakeholder Management. The incumbent will be responsible for supporting GSIRT’s Crisis Management Program including a focus on conducting exercises to ensure cross-Sony preparedness for significant cyber incidents; enhancing and maintaining crisis plans, frameworks, and other documentation; ensuring readiness of continuity tools; and supporting a cross-Sony, cross-functional response to significant cyber incidents.  

JOB RESPONSIBILITIES 

• Develop materials, coordinate preparation activities, and execute cyber exercises by working with stakeholders across Sony, including various information security teams and functional groups (e.g., legal, privacy, communications, human resources, legal, finance). 

• Collaborate with Sony cyber crisis management team stakeholders and GSIRT leadership to identify potential cyber crisis scenarios as a basis for exercises that will help test and ensure Sony’s cross-functional preparedness. 

• Facilitate exercises among Sony leaders and internal stakeholders to ensure that exercises meet objectives and engage all participants in discussions. 

• Develop lessons learned reports for exercises by coordinating with participants and observers, synthesizing input, and providing actionable recommendations for improvements. 

• Support enhancing and maintaining crisis management plans, including reviewing plans for potential improvements based on lessons learned from incidents and exercises, coordination with cross-functional stakeholders, and changes within Sony from a business or information security perspective. 

• Analyze trends across incidents and exercises to recommend improvements that may not be apparent from looking at each incident or exercise in isolation. 

• Periodically test and ensure readiness of continuity tools, including tools for out-of-band notification or incident communications. 

• Collaborate across multiple cybersecurity delivery teams, including engineering, operations, and monitoring/response to drive implementation of GSIRT actions from exercises or incident lessons learned. 

• Support the Chief Information Security Officer (CISO) in coordinating cross-functional response to significant cyber incidents by working with GSIRT leadership and cross-functional Sony teams, including execution of Sony cyber crisis plans, coordination across functional groups (including information security), and rapid response to emergent issues as a part of overall incident response. 

QUALIFICATIONS FOR POSITION

Your qualifications and experience should include:  

• A Bachelor’s Degree from an accredited college or university or equivalent experience 

• Minimum of 7 years of associated work experience in cybersecurity. 

• Minimum of 5 years of consulting experience. 

• Able to support emergent situations which may require support during evenings and weekends 

• Excellent communication (verbal/written) skills, with an ability to manage internal and external relationships up to senior level management. 

• Strong documentation skills - detailed tracking, executive briefings and reports, etc.   

• Outstanding analytical, process development, and problem-solving skills. 

• Ability to work in a fast paced, results oriented environment. 

• Ability and desire to see plans through to completion. 

• Detail oriented. 

• Demonstrated team player who can effectively handle multiple priorities. 

• Proactive at identifying and supporting removal of impediments to goals and objectives. 

• All candidates must be authorized to work in the USA. 

In addition to competitive pay and benefits, we offer an environment and culture that promotes Diversity, Equity,