BAT is evolving at pace into a global multi-category business. With products like VELO, VUSE and GLO we are on a mission to decrease the health impact of our industry
To achieve our ambition, we are looking for colleagues who are ready to Be The Change. Come, join us on this journey!
British American Tobacco has an exciting opportunity for a Head of Security Incident Response and SOC
The Incident Response and SOC Leader is a critical role within BAT, responsible for leading and overseeing all aspects of Incident Response activities and managing the Security Operations Centre (SOC). This individual will play a vital role in protecting the organization's critical assets and ensuring business continuity in the face of cyber threats.
- Continuously improve the effectiveness of the incident response process
- Reduce the Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR) for security events and incidents
- Improve the overall security posture of the organization
- Enhance the organization's ability to detect and respond to cyber threats
- Proactively identify and mitigate emerging security threats
- Build and maintain a high-performing IR and SOC team
- Ensure compliance with all relevant security regulations and industry best practices
- Provide timely support to Legal, Privacy, Compliance, and Human Resources investigations
This role will have a significant and direct impact on BAT by :
Strengthening Security Posture : Enhancing the organization's ability to detect, prevent, and respond to cyber threats, minimizing risk, and protecting critical assetsImproving Operational Efficiency : Automating security operations processes, freeing up valuable resources, and enabling faster, more effective responses to incidentsDriving Innovation : Fostering a culture of security innovation and exploring emerging technologies to stay ahead of the curveBuilding a Competitive Advantage : Enhancing the organization's reputation for security and building trust with stakeholdersYour key responsibilities will include :
Lead and coordinate incident response activities, including triage, investigation, containment, eradication, and recoveryDevelop and maintain an effective incident response plan and communicate it to all relevant stakeholdersConduct post-incident reviews to identify lessons learned and implement improvements to the incident response processCollaborate with other BAT stakeholders, such as IT, legal, and human resources, to effectively manage security incidentsLead and Manage the Security Operations Center
Oversee the daily operations of the SOC, including threat monitoring, security event analysis, and incident response activities (currently provided by external MSSP)Manage and mentor a team of security analysts, providing guidance, training, and performance feedbackDevelop and maintain standard operating procedures (SOPs), including incident response playbooks, threat hunting methodologies, and security monitoring rulesWork closely with SOC Engineering to implement and maintain security information and event management (SIEM) and other security monitoring toolsThreat Intelligence and Hunting
Stay abreast of the latest cyber threats and vulnerabilitiesConduct proactive threat hunting activities to identify and mitigate potential threats before they can impact the organizationAnalyze threat intelligence data to identify and prioritize threats relevant to the organizationConfidential Investigations
Support Legal & Privacy, Compliance, Human Resources and other sensitive investigations requiring digital forensic analysisWhat are we looking for?
Ability to think critically, solve complex problems, and make data-driven decisionsStrong leadership skills to inspire and motivate the teamStrong technical expertise in incident response and security operations, including SIEM, SOAR, EDR, PAM, firewalls, proxies, and other relevant security technologiesExperience with security monitoring tools (e.g., intrusion detection systems, firewalls, endpoint detection and response)Strong investigative, analytical, and problem-solving skillsStrong knowledge of security frameworks and standards (e.g., NIST, CIS, ISO 27001)Excellent communication and interpersonal skills to collaborate with technical and non-technical stakeholdersAdvanced security certifications (e.g., SANS, CISSP, CISM, CISA)Experience with cloud security (e.g., AWS, Azure)Knowledge of machine learning and artificial intelligence applications in securityUniversity degree; or7+ years of relevant professional experienceWhat we offer you?
We offer a market leading annual performance bonus (subject to eligibility)Our range of benefits varies by country and includes diverse health plans, initiatives for work-life balance, transportation support, and a flexible holiday plan with additional incentivesYour journey with us isn't limited by boundaries; it's propelled by your aspirations. Join us at BAT and become a part of an environment that thrives on internal advancement, where your career progression isn't just a statement – it's a reality we're eager to build together. Seize the opportunity and own your development; your next chapter starts here.You'll have access to online learning platforms and personalized growth programs to nurture your leadership skillsWe prioritise continuous improvement within a transformative environment, preparing for ongoing changesWHY JOIN BAT?
We’re one of the few companies named as a Global Top Employer by the Top Employers Institute – certified in offering excellent employee conditions.
At BAT, we champion collaboration, inclusion, and partnership as the bedrock of our values. We wish to foster an environment where every individual can thrive, irrespective of factors such as gender, sexual orientation, marital or civil partnership status, gender reassignment, race, religion or belief, colour, nationality, ethnic or national origin, disability, age, skills, experience, education, socio-economic and professional background, as well as diverse perspectives and thinking styles. We recognise that our strength lies in embracing talent from all walks of life, empowering us to develop our culture of inclusivity and better achieve our business objectives.
We view career breaks not as obstacles but as opportunities and encourage everyone, without hesitation, to apply. Through our Global Returners program, we provide support to professionals seeking to re-enter the workforce after an extended absence, be it for family care, parental leave, national service, sabbatical, or starting their own venture.
Come bring your difference and see what is possible for you at BAT. Learn more about our culture and our award winning employee experience here .
We take pride in being a Disability Confident Employer. If you need any reasonable adjustments or accommodations to be made during the recruitment process to support you performing at your best, please inform the recruitment partner who will be in touch should your profile be selected for the role you applied for. We are wholeheartedly committed to optimising your prospects of success by making suitable arrangements so that you may showcase your full potential.
J-18808-Ljbffr
#J-18808-Ljbffr