Pay Range

Company Overview

The people of Memorial Sloan Kettering Cancer Center (MSK) are united by a singular mission: ending cancer for life. Our specialized care teams provide personalized, compassionate, expert care to patients of all ages. Informed by basic research done at our Sloan Kettering Institute, scientists across MSK collaborate to conduct innovative translational and clinical research that is driving a revolution in our understanding of cancer as a disease and improving the ability to prevent, diagnose, and treat it. MSK is dedicated to training the next generation of scientists and clinicians, who go on to pursue our mission at MSK and around the globe.

Please review important announcements about vaccination requirements and our upcoming EHR implementation by clicking here.

Important Note for MSK Employees:

Your Career Hub profile is submitted to the hiring team as your internal resume. Please be sure your profile is fully complete with your skills, relevant experience and education (if required). Click here to learn more. Please note, this link is only accessible for MSK employees.

Job Description

Associate Director, Security Threat, and Incident Management

Exciting Opportunity at MSK: We are seeking an Associate Director, Security Threat, and Incident Management (STIM). In this role, you will provide operational oversight over the STIM team and advise the Chief Information Security Officer, Director of Security Operations, and other stakeholders (including executive leadership) on relevant security threats, incidents, and vulnerabilities. This team is also responsible for the deployment and management of enterprise security solutions supporting key enterprise capabilities, including endpoint threat protection and vulnerability scanning.

You will also assist in developing and managing various information security policies, standards, and guidance, ensuring regulatory compliance with all applicable security regulations as well as developing and coordinating security awareness and training content.

Role Overview:

• Maintain current knowledge of security vulnerabilities, threats, and industry best-practices (both within and external to the healthcare industry).
• Ensure the timely identification and sufficient response to security incidents. Ensure the ongoing operations of all related technologies with minimal degradation of services.
• Ensure timely and adequate development and testing of incident response procedures to include managing and updating all organizational incident response process guidance and playbooks.
• Develop and oversee the training, operation, and monitoring of our third-party Security Operations Center who act as the first level of response and triage for any security alerts or incidents.
• Oversee all security incident investigation activities including root cause analysis, reverse engineering, digital forensics, and after-action reporting.
• Manage the threat intelligence processes to include proactive monitoring of external threat intel feeds and internal security incident and event monitoring solutions to proactively identify and protect the organization against known and emerging threats.
• Deploy, maintain, and monitor the enterprise technology solutions that support this function including vulnerability scanners, SIEM solutions, Anti-virus, EDR, endpoint threat management, and forensics tools.
• Develop and implement an annual personal education plan to maintain currency of security-related skills, technologies, methodologies, and best practices.

Key Qualifications:

• 7- 10yrs experience responding to security threats
• Deep understanding of cybersecurity principles and threat landscapes
• Experience in leading and managing security teams, including training and mentoring staff.
• Solid understanding and expertise in managing Security Operations centers.

Core Skills:

• Expertise in handling and responding to security incidents, including containment, eradication, and recovery processes.
• Ability to analyze and interpret threat intelligence to anticipate and mitigate potential security threats.
• Knowledge of digital forensics to investigate security breaches and gather evidence.
• Proficiency in securing network infrastructures and understanding network protocols.
• Strong skills in managing crises and making quick, effective decisions under pressure.

Additional Information:

• Location: 633 Third Avenue, NYC
• Reporting to The Director, Cybersecurity Operations
• Schedule: Fully Remote

Pay Range: $162,000.00-$267,200.00

Helpful Links:

• MSK Compensation Philosophy
• Review Our Greats Benefits Offerings

#LI-POST

#LI-REMOTE

Closing

MSK is an equal opportunity and affirmative action employer committed to diversity and inclusion in all aspects of recruiting and employment. All qualified individuals are encouraged to apply and will receive consideration without regard to race, color, gender, gender identity or expression, sexual orientation, national origin, age, religion, creed, disability, veteran status or any other factor which cannot lawfully be used as a basis for an employment decision.

Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.