Security Operations Team Lead

1.1 Security Operations
* Develop and implement security operations strategies and plans.
* Align security operations with business goals and risk tolerance.
* Enhance the optimization of utilized tools and mitigate associated cloud costs.
* Develop long-term plans for enhancing the security posture.
* Implement and maintain security controls to protect digital assets.
* Establish incident response procedures to minimize the impact of security incidents.
* Develop and implement remediation plans to prevent future incidents.
* Collaborate with legal and compliance teams to address regulatory and legal requirements.
* Participate in cross-functional initiatives and projects to improve overall security posture.
* Define and communicate security policies, procedures, and guidelines.
* Evaluate, select, and implement security tools and technologies.
* Monitor, measure, and report key performance indicators (KPIs) to assess the effectiveness of security operations.

1.2 Cyber Security Incident Response Plan
* Develop, implement, and maintain a cyber security incident management capability in alignment with ICT Incident Management Plan.
* Develop a cyber security incident response playbook.
* Develop incident response plans and coordinate tabletop exercises.
* Support the cyber security incident investigation process where required.
* Support the preparation of reports that document security breaches, lessons learned, and remediation

1.3 People Leadership and Management
* Lead and manage a team of security analysts and operators.
* Provide leadership, guidance, and mentorship to the security operations team.
* Define the roles and responsibilities of the team of security analysts and operators.
* Foster a collaborative and high-performance culture within the team.
* Manage and maintain an accurate forward-looking resource capacity plan as part of an enterprise-wide approach to resource planning to support the optimal flow of work across the team.
* Work alongside the cybersecurity team, to enable our teams to be fit for the future. Manage the cross-skilling of staff to minimize key person dependency risks.
* Ensure the team is connected to mission and purpose and technology strategy and business plan.
* Lead people through change, supporting them with information, coaching, and strategies to sustain changes.
* Manage, lead, communicate, and negotiate through the employee lifecycle (recruitment, performance review, discipline, etc) with the required due diligence and ensure effective outcomes.

1.4 Development and Training
Be proactive about your own personal development by:
* Identifying your development needs with the Cyber Security Manager
* Undertaking professional and job-specific development and training as appropriate
* Providing assistance, advice, and support to other team members
* Keeping abreast of trends and new initiatives in your area of specialization

1.5 Technology Threat Intelligence Management
* Conduct open-source research to identify potential areas of risk and provide findings through written reports.
* Support intelligence/security initiatives and strategies.
* Monitor emerging threats and oversee the analysis of data from varied sources and perspectives to identify potential areas of impact.

1.6 Identity and Access Management Control
* Monitor and perform reviews of Identity and Access Management solutions.
* Generate and maintain current versions of the overall access model to inform risk-based decisions.
* Conduct reviews of key access solutions and proactively work with service owners to remediate gaps.

1.7 Process and Standards Compliance
* Stay informed about relevant laws, regulations, and industry standards.
* Implement controls to meet compliance requirements (e.g., NERC CIP for utilities).
* Prepare for and support compliance audits and assessments.
* Assist with and advocate for the development and establishment of the Architecture standards, policies, and processes in the context of Generation Technology.

Following Salt New Zealand’s success at the 2022 RCSA Industry Awards ― where we won the ‘Excellence in Client Service’ and ‘Excellence in Candidate Care’ categories ― we’re proud to have been finalists in the 2023 RCSA Awards ‘Excellence in Client Service’ and ‘Excellence in Candidate Care’ categories. Thank you to our clients, candidates, and Salt team members.

Salt is acting as an Employment Agency in relation to this vacancy.