Security Incident Response Manager for CIB

Description

**Excited to grow your career?** BBVA is a global company with more than 160 years of history that operates in more than 25 countries where we serve more than 80 million customers. We are more than 121,000 professionals working in multidisciplinary teams with profiles as diverse as financiers, legal experts, data scientists, developers, engineers and designers. **Learn more about the area:** BBVA’s Corporate and Investment Banking (CIB) area is the global business unit responsible for serving large corporations, financial institutions, and international investors. Given the critical nature of CIB, the Incident Response area operates under strict protocols to contain threats, mitigate financial impact, and neutralize risks without disrupting market operations. **About the job:** Within the Corporate and Investment Banking (CIB) area, we are seeking an Incident Response Lead. We seek a professional with solid experience in cybersecurity operations and crisis management, capable of leading responses to complex incidents, coordinating multidisciplinary teams, and communicating effectively both with technical staff and senior leadership. The role requires combining advanced technical knowledge with leadership skills, decision-making under pressure, and strategic vision to drive continuous improvement in incident response capabilities and strengthen the organization’s cyber resilience. **Job Description** Operational Team Leadership * Leading the incident response service, collaborating on its strategic definition and governance. * Coordinating a team of six Level 2 specialists, as well as supervising the Level 1 operational service. * High availability and commitment to ensuring business continuity during crises. Customer Focus and Continuous Improvement * Service Evolution: Leading continuous service improvement through ongoing reviews (post-incident or service reviews), identifying gaps to convert them into tangible improvements, with a strong focus on our customers. * Developing and maintaining local strategies aligned with global guidelines and tailored to our local customers. Crisis Management, Prioritization, and Escalation * Making critical decisions and resolving complex problems in high-pressure, dynamic environments. * Efficient Prioritization and Escalation: Identifying issues, defining team priorities, and communicating effectively with the Detection and Response leadership team and our customers. * Collaborating with the ingestion and monitoring team to refine alerts, request new detection methods, and eliminate excessive noise that could slow down response. * Defending the service during audits and compliance with international financial sector regulations. **Requirements** * University degree in Computer Science, Engineering, or a related field. * At least 7 years of demonstrable experience in cybersecurity. * At least 3 years leading incident response teams. * Experience using incident management tools such as SIEM, SOAR, or EDR. * Experience using forensic tools and knowledge of containment and eradication techniques. * Minimum English proficiency level B2. * Candidates holding security certifications such as GCIH, GSOC, CISSP, ISO 27035 Lead Incident Manager, or similar will be preferred. * Soft skills: * Leadership and people management skills. * Assertive communication (ability to translate complex technical concepts into business- and customer-facing language). * Autonomy, composure, and critical thinking to prioritize tasks during crisis situations. **Skills:** Client Orientation, Empathy, Endpoint Detection and Response (EDR), Ethics, Innovation, Proactive Thinking, SIEM Tools