Job Information
Huntington National Bank CIRT Privacy Operations Analyst, Senior in Detroit, Michigan
Description
Summary:
The Cybersecurity Operations Analyst, Senior, will use Huntington's Enterprise tools to complete investigations and respond to Information Security incidents as appropriate. He/she will report to the e-Discovery manager and will work to establish CIRT privacy operations in support of Huntington Bank Computer Incident Response Team (CIRT) functions. The analyst will work with the e-Discovery Team to ensure all incidents and investigations are promptly addressed. The role also works closely with members of the Cybersecurity Operations Center (CSOC), Insider Threat team, Corporate Security, Human Resources, and Legal to investigate CIRT privacy incidents.
Duties and Responsibilities:
Acts as the Team Lead for CIRT privacy operations and serves as a liaison for Legal, Corporate Security, Human Resources, and/or other areas requiring investigative/eDiscovery assistance.
Advises lawyers and investigators on the relevance of data to a case or investigation.
Investigates reports of suspicious activity, analyzing evidence to determine the “who, what, when, and how” aspects of the incident.
Coordinates the response to incidents following the Computer Incident Response Team (CIRT) procedures, ensuring the proper parties are included in the response and incidents are properly escalated.
Methodically documents incidents and follows up with appropriate stakeholders to ensure incidents are properly resolved per the incident response life cycle.
Uses corporate tools and investigative methods to discover, process, and preserve emails and documents that may be needed for litigation. Electronic data to be discovered may include Internet use history reports, word processing documents, images, and other files.
Works with counsel (internal and external), corporate security, and human resources to provide reports as requested for legal and/or investigation purposes.
Responds to inquiries regarding suspicious emails and/or reported activity. This may entail reviewing attachments, investigating suspicious activity reported, or mailing ID Theft documentation to customers.
Tracks and reports on metrics pertinent to the CIRT workload and works closely with the e-Discovery manager to effectively build out CIRT privacy operations and procedures to include playbook/runbook development.
Basic Qualifications:
Minimum 5 years of experience in privacy, compliance, or program management
Bachelor's degree
Preferred Qualifications:
Experience working with Enterprise eDiscovery/Forensics tools and/or Insider Threat monitoring tools a plus.
Strong troubleshooting and problem-solving skills
Maintains, updates, and creates Runbooks and other support documents as appropriate.
Provides input to architecture and technology teams on tools, processes, and requirements for CIRT investigations/eDiscovery matters.
Provide leadership by lending your privacy expertise to minimize privacy risks and translate privacy requirements into actionable processes and guidelines for internal stakeholders.
Ensure continuous alignment with business vision and roadmap.
Communicate utilizing purposeful and effective strategies, both formal and informal, to provide visibility into privacy risks and to drive a culture of compliance.
Execute by driving timelines, deliverables, and KPIs to support privacy compliance requirements.
Comply with the organization’s cybersecurity policies, procedures among colleagues, contractors, alliances, etc.
Candidate will be an excellent communicator who works across team boundaries well and communicates effectively in order to resolve complex issues.
Exempt Status: (Yes = not eligible for overtime pay) (No = eligible for overtime pay)
Yes
Workplace Type:
Huntington is an equal opportunity and affirmative action employer and is committed to providing equal employment opportunities for all regardless of race, color, religion, sex, national origin, age, disability, sexual orientation, veteran status, gender identity and expression, genetic information, or any other basis protected by local, state, or federal law.
Tobacco-Free Hiring Practice: Visit Huntington's Career Web Site for more details.
Agency Statement: Huntington does not accept solicitation from Third Party Recruiters for any position