Incident Response Lead

FNZ Group

We provide a global, end-to-end wealth management platform that integrates technology, business & investment operations all in a regulated financial institution.

At FNZ, our purpose is to make wealth management more accessible, bringing easier, fairer and more inclusive solutions to people worldwide. Here in the Global Information Security team, we work to protect the platforms that support investment solutions for over 20 million people.

We are looking for a Cyber Security Incident Response Lead to join the Security Operations team. You will be an expert in incident management, security risk concepts and technical security. You will be defining and leading the incident response function under direction from the cyber security incident response and operations manager. You will be responsible for escalations from the SOC as well as medium and low severity incidents and be a major part of the investigation for higher severities. Between incidents you will be assisting in improvements in detection engineering/design updating and maintain incident playbooks, threat hunting with assistance from the threat intelligence team and training incident response analysts. You will be joining an experienced team and working to support some of the biggest financial services clients in the world.

Reporting directly to the Cyber Security Incident Response and Operations Manager, you will lead a newly created incident response team and be looking to prepare a good foundation and maturity to the incident response processes.

Specific Role Responsibilities

1. Incident Management: Supporting with major incidents and be second in command and back up for leading cyber security events.
2. Security Operations Center (SOC) Management: Be an escalation point for the SOC team for identified potential major incidents.
3. Security Incident Response: Develop and maintain an incident response plan, conduct periodic exercises to test the response readiness of the team, and continually enhance the incident response process.
4. Team Training and Development: Provide mentorship and training to security analysts, ensuring they are equipped with the necessary skills and knowledge to excel in their roles.
5. Security Incident Remediation: Coordinate with IT and infrastructure teams to implement necessary remediation actions following security incidents, including applying patches, updating configurations, or deploying new security measures.
6. Triage of alerts from FNZ Group systems.
7. Analysis of alerts and escalation where required.
8. Following Standard Operating Procedures and playbooks to respond to incidents.
9. Supporting development and enhancement of SIEM detection and playbooks.

Experience Required

1. Excellent spoken and written English.
2. Significant experience of Incident Response (triage, classification, investigation, escalation).
3. Good working knowledge of networking protocols and investigation (capture, Wireshark).
4. Good knowledge of Operating Systems, Databases and Applications (Windows, Linux, SQL, F5).
5. Well versed in SIEM tools (Splunk, Sentinel).
6. Well versed in EDR tools (Defender, Crowdstrike).
7. Knowledge of security concepts (MITRE, Kill-Chain).
8. Significant experience in major incident handling and managing the incident.
9. Willing to be part of an on-call rota for escalations of incidents.

About FNZ Culture

Our culture is what drives us. It's at the heart of who we are and everything we do. It's what inspires, excites and moves us forward. Our ambition is to create a culture for growth, one that opens up limitless opportunities for our employees, customers and the wider world. At FNZ we know that great impact is only possible with great teamwork.

That’s why we value the strength and diversity of thought in our global team.

The FNZ Way is the cornerstone of what we do. It is comprised of four values that set the standard for how everyone at FNZ interacts with each other, with our customers, and with all our diverse stakeholders around the world.

Right from day one, you will work alongside exceptional, multicultural teams - experts in their respective fields - who will inspire and challenge you to make your greatest impact.

Be part of a highly successful, rapidly growing, global business that is leading the delivery of financial services via cloud computing and partners with some of the world’s largest companies.

Working in a flexible and agile way that meets the needs of the business and personal circumstances.

Remuneration, significant financial rewards and career advancement is based on individual contribution and business impact rather than tenure or seniority.

We provide global career opportunities for our best employees at any of our offices in the UK, EU, US, Canada, South Africa and APAC.

Commitment to Equal Opportunities

At FNZ, we recognise that diversity, equity and inclusion are important factors contributing to our success. We embrace the unique perspective and capabilities of our current and future employees, which will help us continue to drive innovation and achieve our business goals. Recruitment decisions at FNZ are made in a non-discriminatory manner without regard to gender, ethnicity/race, faith, age, nationality, gender identity, sexual orientation, marital status, socio-economic background, disability or military veteran status where all applicants and employees are valued and respected.

In addition, we want to ensure accessibility needs are well supported, if you require specific support please advise us.

About FNZ

FNZ is committed to opening up wealth so that everyone, everywhere can invest in their future on their terms. We know the foundation to do that already exists in the wealth management industry, but complexity holds firms back.

We created wealth’s growth platform to help. We provide a global, end-to-end wealth management platform that integrates modern technology with business and investment operations. All in a regulated financial institution.

We partner with over 650 financial institutions and 12,000 wealth managers, with US$1.5 trillion in assets under administration (AUA).

Together with our customers, we help over 20 million people from all wealth segments to invest in their future.