Director of Cyber Risk Defense - TDO

Kaiser Permanente•Pleasanton, CA

About The Position

This managing level position is primarily accountable for proactively monitoring and responding to emerging threats to the KP network. This includes overall direction for the incident handling process (containment, protection, and remediation) and strategic oversight of the development and deployment of response plans. This position will direct the resolution for high impact, critical cyber security incidents, information fusion procedures, Use Case planning and development, quality assurance validation, and investigations. This position will also effectively communicate investigative findings to non-technical audiences and be responsible for partnerships with key stakeholders (CRDC Policy Engineers, Remediation teams, management stakeholders). Essential Responsibilities: Directs the operation of multiple units and/or departments by identifying customer and operational needs; analyzing resources, costs, and forecasts and incorporating them into business plans; gaining cross-functional support for business plans and priorities; translating business strategy into actionable business requirements; obtaining and distributing resources; setting standards and measuring progress; removing obstacles that impact performance; guiding performance and developing contingency plans accordingly; and ensuring products and/or services meet customer requirements and expectations while aligning with organizational strategies. Demonstrates continuous learning and maintains a highly skilled and engaged workforce by aligning resource plans with business objectives; overseeing the recruitment, selection, and development of talent; motivating teams; preparing individuals for growth opportunities and advancement; staying current with industry trends, benchmarks, and best practices; providing guidance when difficult decisions need to be made; and ensuring performance management guidelines and expectations drive business objectives and results. Takes accountability for the proactive monitoring and/or response to known or emerging threats against the KP network. Effectively communicates investigative findings to non-technical audiences. Ensures closed loop processes on security efforts by providing feedback to the Cyber Risk Defense Center (CRDC) leads and/or leadership. Directs information fusion procedures across operations and engineering, including activities such as Use Case planning/development, Use Case quality assurance validation, and response procedure documentation. Overseeing and ensuring partnerships between stage teams and upper management to drive the identification and resolution of issues, improvement areas, or security/architectural gaps. Establishes a network of partnerships with the CRDC Policy Engineers and Remediation teams to ensure identified issues are contained and to set the direction for improving security posture. Oversees follow-up remediation design and review efforts. Ensures security events across cyber security domains are investigated and triaged as appropriate. Directs the response and resolution of high impact or critical cyber security incidents. Sets the strategic direction for the development and deployment of incident response plans. Provides overall direction for incident handling processes, including containment, protection, and remediation activities.

Requirements

Minimum four (4) years supervisory experience.
Minimum four (4) years managing operating budgets and/or project financials.
Bachelors degree in Business Administration, Computer Science, Social Science, Mathematics, or related field and Minimum eight (8) years experience in IT or a related field, including Minimum four (4) years in information security or network engineering.
Additional equivalent work experience may be substituted for the degree requirement.

Nice To Haves

Four (4) years experience in cyber security vulnerability, threat response, or investigation.
Four (4) years of work experience in a role requiring interaction with executive leadership (e.g., Vice President level and above)
Two (2) years experience overseeing projects or programs requiring the integration of cross-functional technology and/or business solutions.
Four (4) years experience in IT incident management, including the development and/or deployment of remediation plans.

Responsibilities

Directs the operation of multiple units and/or departments by identifying customer and operational needs; analyzing resources, costs, and forecasts and incorporating them into business plans; gaining cross-functional support for business plans and priorities; translating business strategy into actionable business requirements; obtaining and distributing resources; setting standards and measuring progress; removing obstacles that impact performance; guiding performance and developing contingency plans accordingly; and ensuring products and/or services meet customer requirements and expectations while aligning with organizational strategies.
Demonstrates continuous learning and maintains a highly skilled and engaged workforce by aligning resource plans with business objectives; overseeing the recruitment, selection, and development of talent; motivating teams; preparing individuals for growth opportunities and advancement; staying current with industry trends, benchmarks, and best practices; providing guidance when difficult decisions need to be made; and ensuring performance management guidelines and expectations drive business objectives and results.
Takes accountability for the proactive monitoring and/or response to known or emerging threats against the KP network.
Effectively communicates investigative findings to non-technical audiences.
Ensures closed loop processes on security efforts by providing feedback to the Cyber Risk Defense Center (CRDC) leads and/or leadership.
Directs information fusion procedures across operations and engineering, including activities such as Use Case planning/development, Use Case quality assurance validation, and response procedure documentation.
Overseeing and ensuring partnerships between stage teams and upper management to drive the identification and resolution of issues, improvement areas, or security/architectural gaps.
Establishes a network of partnerships with the CRDC Policy Engineers and Remediation teams to ensure identified issues are contained and to set the direction for improving security posture.
Oversees follow-up remediation design and review efforts.
Ensures security events across cyber security domains are investigated and triaged as appropriate.
Directs the response and resolution of high impact or critical cyber security incidents.
Sets the strategic direction for the development and deployment of incident response plans.
Provides overall direction for incident handling processes, including containment, protection, and remediation activities.