We are seeking passionate people to grow the Cyber Security team within WTW and provide an excellent service and trusted expertise to all parts of our business. As part of a business wide transformation, we have an exciting opening for a new role of Global Head of Technical Cyber Incident Response.

As part of the Cyber Defence and Security Operations department, you will be a senior leader managing the ICS Incident Response service ensuring WTW can contain and eradicate cyber-attacks from our environment.

You will need to have a good technical aptitude, excellent communicative skills to technical and non-technical audiences, and a solid business acumen to deal with other senior stakeholders across the business.

This role would suit those with an extensive history in Incident Response for global enterprise organisations or have led MSSP services and are used to working in a high-pressure environment and managing geographically dispersed teams across different time-zones.

To ensure robust processes are in place to contain and eradicate cyber incidents from the WTW environment in line with regulations and best practise. As the Global Head of Technical Cyber Incident Response, your primary responsibilities will be:

• Manage and develop a global team of Cyber Incident Responders, providing expert assistance during a major cyber incident and for routine investigations escalated by the SOC.

• Lead a wide variety of IR engagements from supplier compromise, financial fraud and cyber related issues.

• To provide L3 support to SOC, Insider Threat and Threat Hunting teams within WTW

• Develop and implement Incident Response plans across ICS to ensure we can respond in an efficient manner to a variety of cyber attacks.

• Support the Global Head of Strategic Cyber Incident Response ensuring IR plans within business segments are understood by ICS.

• Engage third party suppliers to ensure holistic and effective IR process are in place to deal with cyber attacks.

• Conduct regular TableTop exercises across WTW to simulate a cyber-attack.

• Conduct Quality Assurance checks on SOC activities to ensure incidents have been dealt with correctly.

• Provide senior stakeholder and board level briefings and engage with legal teams and regulators when required

• Any other task required by the Global Director of Cyber Defence

Communication and Relationships:

 Close working relationships will be needed with other team members around the globe

 You will need to work with technical contacts throughout the business and with multiple third parties

 You will need to brief the security leadership team, board member and other internal business units on threat related criteria

Essential:

 It is essential that you have extensive experience as a senior leader within an enterprise organisation(s) leading Incident Response Teams and managing major cyber incidents

 Experience dealing with a wide variety of IR tasks leading to successful outcomes

 Solid understand of financial regulations within IR to ensure IR work is carried out in an auditable an legally sound manner that regulators will deem acceptable

 A solid understanding of cyber risk and how cyber-attacks are conducted across endpoints, cloud and on-premise networks

Beneficial:

 Experience within a Global SOC, either within an MSSP function or an internal enterprise level SOC

 Experience working with Sentinel and Defender for “X”

 Great verbal and written communication skills, and the ability to write reports, processes and procedures in a structured manner

 Previous exposure to a variety of compliance and regulatory requirements such as FCA, PCI, ISO27001, GDPR and other global regulations

 Experience running a global team sitting in different time zones

Equal Opportunity Employer

At WTW, we believe difference makes us stronger. We want our workforce to reflect the different and varied markets we operate in and to build a culture of inclusivity that makes colleagues feel welcome, valued and empowered to bring their whole selves to work every day. We are an equal opportunity employer committed to fostering an inclusive work environment throughout our organization. We embrace all types of diversity.

At WTW, we trust you to know your work and the people, tools, and environment you need to be successful. The majority of our colleagues work in a” hybrid” style, with a mix of at home and in-office interactions dependent on the needs of the team, role and clients. Our flexibility is rooted in trust and “hybrid” is not a one-size-fits-all solution.