Cyber Security Supervisor

Summary

The Supervisor, Cybersecurity is responsible for leading and overseeing a team of Cybersecurity Analysts. This role requires strong leadership, technical expertise, and a deep understanding of security operations best practices. The Supervisor will oversee day-to-day functioning of the Cybersecurity team, including incident response, security monitoring, Identity and Access management, Governance, Risk and Compliance and vulnerability management.

Responsibilities

Team Leadership & Management:

• Lead, support, and develop a high-performing team of Cybersecurity Analysts
• Conduct performance reviews, provide constructive feedback, and identify opportunities for professional growth within the team.
• Recruit, interview, and onboard new team members
• Set and measure clear goals, objectives, and performance expectations for the team
• Motivate and inspire the team to achieve operational excellence
• Foster a positive, collaborative, cross-functional team environment
• Work collaboratively with other teams, departments and companies

Security Operations Oversight:

• Oversee day-to-day operations of the Cybersecurity team, ensuring efficient and effective monitoring and response to security events
• Develop and implement SOPs, playbooks, and runbooks for security incident response and other security operations activities with a focus on automation
• Monitor and analyze security alerts, investigate security incidents, and coordinate response activities
• Conduct root cause analysis of security incidents and implement corrective actions to prevent future occurrences
• Evaluate performance of security operations vendors

Threat Hunting & Intelligence:

• Lead threat hunting activities to proactively identify and mitigate emerging threats
• Stay informed about the latest security threats and vulnerabilities through threat intelligence feeds, industry publications, and other sources
• Analyze security intelligence and incorporate relevant threat information into security operations processes

Vulnerability Management:

• Oversee vulnerability management operations with key internal stakeholders, including vulnerability scanning, assessment, and remediation
• Lead the development and implementation of vulnerability management operational policies and procedures

Security Tooling & Technology:

• Collaborate in evaluation and selection of security tools and technologies to enhance the effectiveness of the Cybersecurity team
• Maintain operational oversight of security operations tools and technologies, including SIEM, XDR, SOAR, endpoint detection and response systems and Identity and Access management tools

Compliance & Reporting:

• Ensure compliance with relevant security regulations and industry standards (e.g., PCI-DSS, ISO 27001, SOC, NIST Cybersecurity Framework)
• Generate reports on security operations activities, including incident response metrics, threat intelligence, vulnerability management findings and security awareness training metrics
• Participate in security audits and assessments

Perform other duties as required and assigned

May be required to work outside of normal business hours to respond to urgent cybersecurity matters.

Essential Functions of the Role

Education & Work Requirements

Education & Work Preferences

• Bachelor's Degree or Master's Degree in Computer Science, Information Technology, Cybersecurity, or a closely related field
• Relevant security certifications (e.g., CISSP, CISM, CISA, GCIH, GCIA)
• Experience with cloud security and cloud-based security operations
• 8+ years of experience in information technology with at least 3 years of experience in security operations
• 6+ years of combined security operations, incident response, vulnerability management, Governance, Risk and Compliance, or equivalent experience
• Strong understanding of security operations principles, methodologies, and best practices
• Experience with scripting languages
• Experience with security information and event management (SIEM) systems and other security operations tools
• Strong understanding of network security, incident response, threat hunting, and vulnerability management

Competencies