Sr Cyber Incident Coordinator

The Sr. Cyber Incident Coordinator is part of the Cyber Incident Response team, which is responsible for supporting and coordinating the response to major cyber incidents, as well as developing playbooks and processes to be utilized during an incident.

The Cyber Incident Coordinator is responsible for assisting with coordinating incident response activities, periodically communicating with relevant stakeholders to facilitate response, and continually improving incident response processes and procedures for

Position Responsibilities: Cyber Incident Coordination * Facilitates and coordinates the cybersecurity response, with direction from the Principal Cyber Incident Coordinator, across people, processes, and technology to reduce the impact of and the recovery time for cyber incidents. * Assists with efforts for the integration of cyber incident response activities with the broader organization's incident response processes to ensure cyber risk preparedness and consistency/alignment with the enterprise. * Assists Cyber Defense Operations teams in determining if an event needs to be declared as a major security incident, according to defined criteria that is in line with Comerica's compliance responsibilities and escalating to the Principal Cyber Incident Coordinator if further investigation and clarification is required. * Supports the facilitation of incident response activities in coordination with the Principal. * Cyber Incident Coordinator and provide/gather accurate, timely, and appropriate status reporting for the incident. * Collaborates both internally between the cybersecurity teams and externally with relevant business stakeholders in support of the incident handling process. Communication and Administration * Continuously maintains and enhances incident response plans, relevant playbooks, and knowledge base to increase efficiencies and control organizational risk. * Participates in process improvement projects across Cyber Defense, enhancing cross-team workflows to drive collaboration between teams to resolve Cyber Incidents. * Assists the Principal Cyber Incident Coordinator with developing partnerships and collaboration with internal compliance organization to ensure alignment across compliance frameworks. * Participates in carrying out tabletop exercises and incident simulations to ensure operational readiness in the event of a live incident. * Participates in post incident retrospectives (AARs) to aid in continuous improvement and assist in soliciting feedback from partners within the cybersecurity organization, as well as engineering and partner teams across Comerica. * Performs ad-hoc tasks as assigned by the Principal Cyber Incident Coordinator.

Position Qualifications: * Bachelor's Degree from an accredited university in Computer Science, Engineering, Information Systems, Cybersecurity, or Business Administration or other relevant degree or High School diploma/GED - OR - 10 years of progressively responsible experience * 5 years of experience with cybersecurity incident management/response experience * 4 years of experience with security technologies such as the Security Information and Event Management (SIEM) and ticketing platforms * 4 years of experience with the banking sector and its regulations * 4 years of experience as a member of a Security Operations Center (SOC) * This position is not eligible for sponsorship. Must have indefinite employment authorization.

Auburn Hills Operations Center 8:00am - 5:00pm Monday - Friday

Comerica is proud to be an Equal Opportunity Employer - veterans/individuals with disabilities, committed to workplace diversity.