大手証券会社でのGlobal Head of Cyber Threat Defense (Fusion Center)

Responsibilities： ・Develop and implement a comprehensive CTD strategy and roadmap (including the deployment the MITRE ATTACK framework, defense in depth, and other best practices) to safeguard the organization's infrastructure, systems, and data from security threats. ・Lead the Cyber Fusion Center, which includes the Security Operations Center (SOC), Cyber Threal Intel, and Incident Response teams. ・Note that eventually the Cyber Fusion Center will include other activities such anti-fraud and physical access. ・Oversee the detection of cybersecurity events in real time through centralized monitoring. ・Analyze cybersecurity events from multiple sources such as SIEM, IDS/IPS, EDR, AV, Firewalls, etc. ・Respond to and contain cybersecurity incidents, and identify eradication strategies. ・Facilitate the transformation of the current SOC and Incident Response capabilities. ・Manage adversary indicators of compromise, tracking, and monitoring of adversary tactics, techniques, and procedures, motivations, goals and strategic objectives. ・Manage incident response activities, including incident triage, containment, eradication, and recovery to minimize the impact of security incidents on the organisation. ・Lead cyber threat intelligence collaboration internally and externally. ・Create industry standard group level ‘Follow the Sun’ fusion center of CTI and SOC professionals to provide a center for the monitoring, analysis and reporting of cyber events and activities to identify trends and potential risks and leading proactive measures to mitigate. ・Ensures all CTD activities are compliance with all relevant regulations and standards. ・Collaborate with cross-functional teams to assess our security posture and recommend improvements to enhance threat detection and response capabilities. ・Provides regular cyber threat briefings about adversarial threat modelling, advanced analytics, and other leading-edge technologies to proactively inform multiple audiences of potential threats. ・Understand how to convert highly technical language to business-centric language including being able to clearly explain the impact of threats on the business value chains. ・Stay informed about industry trends and best practices in CTD, and recommend improvements to enhance the division's performance. ・Provide clear guidance to key stakeholders (e.g., IT, business, legal, compliance) on how to meet specific security requirements that will enhance all CTD activities. ・Establish relationships with law enforcement and other cyber threat defense agencies in Japan but also in other countries where we have large operations centers. ・Develop and maintain security policies, procedures, and guidelines to ensure compliance with regulatory requirements and industry standards.