Responsible for monitoring, reviewing, tracking, investigating and reporting of Information Security Incidents which are getting recorded or notified through various sources.
The role is also responsible for monitoring technology landscape and associated services for security flaws and incidents, analyzing reported/identified security incidents and ensure timely contentment and remediation of the same.
Role Accountability
1. Monitor and analyze the alerts generated on incident management consoles such as SIEM, DLP, Threat Intelligence etc.
2. Investigate, log, update and resolve Security Incident within the agreed timeline and as per defined process
3. Run Incident management bridge, follow escalation matrix as defined in the process document
4. Conduct Root cause analysis and prepare incident report as per the agreed format
5. Monitor InfoSec owned & managed Infrastructure for issues