Manager, Security Operations Centre

Manager, Security Operations Centre

About Queen's University
Queen’s University is the Canadian research intensive university with a transformative student learning experience. Here the employment experience is as diverse as it is interesting. We have opportunities in multiple areas of globally recognized research, faculty administration, engineering & construction, athletics & recreation, power generation, corporate shared services, and many more.

Come work with us

Job Summary
Reporting to the Director, Service Delivery and Innovation, Information Technology Services (IT Services), the Manager, Security Operations Centre (Manager) oversees the Security Operations Centre (SOC), responsible for the effective identification, assessment, and resolution of events and incidents for the university through the IT Services security incident and event management capability. The Manager is also accountable for the effective transition of new solutions and services from development into production, coordinating the change and release management tasks and communications across multiple units within the Directorate of Service Operations as well as external units. The Manager is accountable for operationalizing the Cybersecurity policies and processes and managing the associated monitoring technologies required to effectively monitor, assess, and defend the environment.

The Manager drives improvements through research and analysis of industry trends and tools, best practices and process refinements, and recommendations to security posture and policies. The Manager handles external stakeholder relationships, vendors and services providers and has direct supervision of staff. The Manager is technically well versed and optimally certified and knowledgeable in Cybersecurity Operations.

**Job Description**:
**KEY RESPONSIBILITIES**:
**Oversees Security Operations Centre**:

- Manages the Security Operations Centre (SOC). Responsible for the effective and efficient operations of the SOC including data collection, report generation, incident monitoring/response, monitoring system performance, communications, education, and vulnerability management.
- Manages system, process improvement, and the quality assurance program.
- Writes and reviews executive and technical reports.
- Oversees the triage of security events and incidents, and facilitates communication within the SOC, and with IT and the Incident Response Team.
- Manages multi-disciplinary teams during the resolution of security incidents and works with other IT Managers to manage availability of resources.
- Responsible to oversee incident response activities for Cloud or on-premise environments, collecting data, coordinating, recording and reporting on activities and decisions as well as documenting progress throughout the incident response life-cycle.
- Collaborates with Security Engineering to deploy and maintain network security monitoring and assessment tools.
- Maintains a gap analysis of SOC capabilities and advocates for enhancements.
- Provides regular communication and status of incidents to stakeholders.
- Designs, establishes, maintains, and optimizes processes, tools and activities in support of the Cybersecurity Program, including preparation, detection, analysis, containment, eradication and post-incident review.
- Sets the objectives of the Security Operations Centre and is responsible for continual service improvement techniques and best practices supported by standard reporting of the services delivered by the unit.

**Oversees Service Transition**:

- Plans and prioritizes the main activities required to efficiently transition new solutions and services into production, predominantly those requiring involvement across multiple units within the Directorate of Service Operations, in close collaboration with a diverse group of service owners, service managers, service teams, planners, and project managers.
- Acts as the prime interface for the Directorate of Service Operations for major service transition planning and reporting.
- Determines the scope and policies for overall service transition, ensuring that they are clearly documented and effectively communicated to all stakeholders.
- Coordinates the cross-functional overall design and on-going maintenance of all service transition processes to ensure that they will work together with tightly integrated interfaces to meet the overall needs of the business. Ensures that the policies, processes, and procedures are integrated with existing policies, processes, and procedures within and across the university.
- Maintains records and provides management information on resource use, project/service transition progress, budgeted and actual spend.
- Manages and coordinates the functions that are involved in service transition such as configuration management, knowledge management, change management, and release management.
- Coordinates and schedules service transition activities across projects, supplie