Job opportunity
Cyber Incident Response Commander (Contract)
Sopra Steria
Cyber Incident Response Commander (Contract)
Full-time
We are recruiting on behalf of our client, a global leader in shipping and logistics, for a
Cyber Incident Response Commander
to join its Computer Emergency Response Team (CERT) in Montréal.
Our client operates a worldwide network of vessels, ports, terminals and logistics services, and relies on a dedicated cyber defence organisation to protect its operations around the clock. In this role, you will be at the centre of that effort, leading the response when security incidents occur.
Overview of the role
The Cyber Incident Response Commander leads the response to information security incidents within our client’s Computer Emergency Response Team (CERT). Reporting to the Incident Response Manager, you will take command when incidents occur: bringing business and technical teams together, assessing severity, coordinating containment and recovery, and keeping leadership informed. Between incidents, you will strengthen the client’s Incident Response Plan, playbooks and processes so the organisation is ready for the next one. This role calls for calm leadership under pressure, sound judgement and the ability to communicate clearly with everyone from analysts to executives.
Mission timeline
Expected start date:
January 4, 2027
Expected end date:
December 31, 2027
Key Responsibilities
Act as
Incident Commander
during security incidents, bringing business and technical units to the table to coordinate an effective response
Assess incident severity, analyse and prioritise incidents, and
formally declare major incidents
based on risk and regulatory criteria
Manage incidents in line with the Incident Response Plan (IRP) and playbooks, ensuring each team member operates within their defined responsibilities and collaborates effectively
Prioritise forensic activities and follow mitigation and recovery efforts through to resolution
Communicate, notify and report on incidents to stakeholders, management and executives
Maintain the IRP and its appendices, keeping it current and aligned with other plans and policies in effect
Refine incident playbooks and write
scope-specific IRPs
(e.g., vessels, regions, subsidiaries)
Work with legal and communications departments to improve incident response processes
Gather
lessons learned , establish links between incidents and recommend improvements
Provide evidence to internal and external auditors
Contribute to Cyber Defense Center collaboration activities and to CERT-related projects, improvements and compliance efforts
Required Skills
5+ years of experience
in a role with similar responsibilities, such as CERT, SOC, SecOps or GRC
Strong understanding of
incident management processes and methodologies , such as ISO 27035, the NIST framework or the SANS 6-step process
Knowledge of
SOC operations, forensics techniques
and security tools
Relevant cybersecurity certifications, such as GCFA, ECIH, CISSP, CEH, ECSA and ITIL Foundation
Degree in a STEM field, cybersecurity or equivalent, with a focus on rigour and optimisation
Proven ability to keep your cool under pressure and think clearly in moments of chaos
Ability to convey security messages to management and executives
Excellent written and verbal communication in English in a professional context, with strong analysis and synthesis skills
Autonomy, proactivity and leadership, with the drive to make things evolve
Ability to work in an international environment with offshore teams
Discretion
when handling sensitive matters
Nice to have skills
Experience in the transport, shipping or logistics industry
Experience working in consulting or client-facing environments
Experience building or maintaining incident response plans and playbooks for multi-site or international organisations
At Sopra Steria, we’re proud to be an equal opportunity employer and to nurture a workplace where everyone feels welcome, respected, and supported. We are committed to fighting all forms of discrimination and building an environment where every individual can thrive. We warmly encourage applications from all qualified candidates, including women, visible minorities, Indigenous peoples, and persons with disabilities. If you require accommodations at any stage of the selection process, we will be happy to provide them upon request.
We sincerely thank all applicants for their interest in this opportunity. We truly appreciate the time and effort you put into applying.
#J-18808-Ljbffr
Apply on source site Full-time
We are recruiting on behalf of our client, a global leader in shipping and logistics, for a
Cyber Incident Response Commander
to join its Computer Emergency Response Team (CERT) in Montréal.
Our client operates a worldwide network of vessels, ports, terminals and logistics services, and relies on a dedicated cyber defence organisation to protect its operations around the clock. In this role, you will be at the centre of that effort, leading the response when security incidents occur.
Overview of the role
The Cyber Incident Response Commander leads the response to information security incidents within our client’s Computer Emergency Response Team (CERT). Reporting to the Incident Response Manager, you will take command when incidents occur: bringing business and technical teams together, assessing severity, coordinating containment and recovery, and keeping leadership informed. Between incidents, you will strengthen the client’s Incident Response Plan, playbooks and processes so the organisation is ready for the next one. This role calls for calm leadership under pressure, sound judgement and the ability to communicate clearly with everyone from analysts to executives.
Mission timeline
Expected start date:
January 4, 2027
Expected end date:
December 31, 2027
Key Responsibilities
Act as
Incident Commander
during security incidents, bringing business and technical units to the table to coordinate an effective response
Assess incident severity, analyse and prioritise incidents, and
formally declare major incidents
based on risk and regulatory criteria
Manage incidents in line with the Incident Response Plan (IRP) and playbooks, ensuring each team member operates within their defined responsibilities and collaborates effectively
Prioritise forensic activities and follow mitigation and recovery efforts through to resolution
Communicate, notify and report on incidents to stakeholders, management and executives
Maintain the IRP and its appendices, keeping it current and aligned with other plans and policies in effect
Refine incident playbooks and write
scope-specific IRPs
(e.g., vessels, regions, subsidiaries)
Work with legal and communications departments to improve incident response processes
Gather
lessons learned , establish links between incidents and recommend improvements
Provide evidence to internal and external auditors
Contribute to Cyber Defense Center collaboration activities and to CERT-related projects, improvements and compliance efforts
Required Skills
5+ years of experience
in a role with similar responsibilities, such as CERT, SOC, SecOps or GRC
Strong understanding of
incident management processes and methodologies , such as ISO 27035, the NIST framework or the SANS 6-step process
Knowledge of
SOC operations, forensics techniques
and security tools
Relevant cybersecurity certifications, such as GCFA, ECIH, CISSP, CEH, ECSA and ITIL Foundation
Degree in a STEM field, cybersecurity or equivalent, with a focus on rigour and optimisation
Proven ability to keep your cool under pressure and think clearly in moments of chaos
Ability to convey security messages to management and executives
Excellent written and verbal communication in English in a professional context, with strong analysis and synthesis skills
Autonomy, proactivity and leadership, with the drive to make things evolve
Ability to work in an international environment with offshore teams
Discretion
when handling sensitive matters
Nice to have skills
Experience in the transport, shipping or logistics industry
Experience working in consulting or client-facing environments
Experience building or maintaining incident response plans and playbooks for multi-site or international organisations
At Sopra Steria, we’re proud to be an equal opportunity employer and to nurture a workplace where everyone feels welcome, respected, and supported. We are committed to fighting all forms of discrimination and building an environment where every individual can thrive. We warmly encourage applications from all qualified candidates, including women, visible minorities, Indigenous peoples, and persons with disabilities. If you require accommodations at any stage of the selection process, we will be happy to provide them upon request.
We sincerely thank all applicants for their interest in this opportunity. We truly appreciate the time and effort you put into applying.
#J-18808-Ljbffr