The core responsibility of the CTOC Incident Manager is to oversee the Incident Management program, processes, and procedures within the CTOC. This role involves leading and coordinating the response to cybersecurity incidents, ensuring the protection of infrastructure and data for customers. The CTOC Incident Manager manages the lifecycle of all cybersecurity incidents, including detection, analysis, containment, eradication, remediation, and recovery. This person will coordinate with internal and external leadership, legal teams, and other relevant stakeholders to resolve incidents. The role also includes coordinating actions across functions including continuous monitoring, threat analysis, and post-incident reviews to improve CTOC capabilities. This position may require working outside of core hours on high-priority investigations and includes on-call responsibilities

Incident Response Planning:

Develop, maintain, and regularly update incident response plans, playbooks, and procedures.

Ensure all SOC staff are trained and familiar with these plans.

Incident Management:

Lead and coordinate the response to cybersecurity incidents, ensuring timely and effective resolution.

Manage the entire incident lifecycle, from detection and analysis to containment, eradication, remediation, and recovery.

Communication:

Serve as the primary point of contact during incidents, ensuring clear and effective communication with internal and external stakeholders, including executive leadership, legal teams, and customers.

Collaboration:

Work closely with other Security teams, Networking/NOC, Engineering, Legal, business units and other stakeholders to ensure a coordinated and effective response to incidents.

Foster strong relationships with external partners and law enforcement agencies.

Incident Manager

Responsibilities

Qualification

Preferred

Company

Accenture Federal Services

More roles at Accenture Federal Services