State Coordinator - State Computer Security Incident Response Team

Designation State Coordinator - State CSIRT

Department - State Computer Security Incident Response Team, Department of Science & Technology, Government of Madhya Pradesh

Place - Bhopal

Job Type - Contractual upto 5 years (based on yearly performance review) through Third Party Agency

Education & Experience Essential Criteria:

Qualification: Engineering Graduate (Any Stream).

Experience:

- Minimum 12 years of experience in the field of Cyber Security comprising of coordination, management and cyber security incident management.

Certifications: Must have Certified Information Security Manager (CISM) OR Certified Information Privacy Professional (CIPP). And (Any one of the below mentioned) Certified Information Systems Security Professional (CISSP) / Certified in Risk and Information Systems Control (CRISC) / Certified Incident Handler (GCIH) / Certified Intrusion Analyst (GCIA) / Certified Ethical Hacker (CEH) / Certified Computer Security Incident Handler (CSIH)/ CompTIA Security+ / Offensive Security Certified Professional (OSCP) / Certified SoC Analyst.

Desirable Criteria:

Qualification: PG Diploma in Cyber Forensics.

Experience:

- Communication & Coordination experience in crisis management.

- Should have professional understanding of legal and regulatory frameworks relevant to cybersecurity and incident response is a must.

Job Objective:

1. Develop an effective communication process for coordinating with Internal & External Stakeholders of State CISRT.

2. Identification of State Information Security Assets & respective departmental Nodal Officer so as to manage the communications smoothly.

3. Effective & timely communication in-between the CSIRT, State CSIRT, Internal & External Stakeholders.

Primary Responsibilities:

1. The incumbent will be responsible to coordinate incident response efforts within Madhya Pradesh. S(he) shall ensure effective communication and collaboration among CSIRT-In, State CSIRT, Government agencies and other stakeholders involved in incident response activities.

2. The State Coordinator should be responsible for receiving and tracking incident reports from various sources, including organizations, government entities, and the public. S(he) should have to maintain incident records, track response progress, and ensure timely reporting to appropriate authorities and stakeholders.

3. To assess incoming incident reports, triage them based on severity, impact, and urgency, and assign appropriate response priorities. S(he) should have to analyze incident details, identify potential threats, and determine the necessary actions to mitigate risks and contain the incidents.

4. The incumbent will be responsible for effectively coordinating during crisis management, crisis drill, training and awareness programs.

5. To identify information security resources availability in various government departments of state including nodal officers, technology tools & infrastructure so as to set-up the communication channel accordingly.

6. Act as a primary point of contact and facilitate communication between the CSIRT and various state stakeholders, such as government agencies, law enforcement, critical infrastructure owners and operators, private sector organizations, and other CSIRTs.

7. To organize and coordinate training sessions, workshops, and awareness programs for CSIRT / State CSIRT, government agencies and other respective stakeholders. Promote knowledge sharing, disseminate incident response best practices, and enhance the overall incident response capabilities within MP.

8. To ensure accurate and timely reporting to management, government authorities, and other designated entities.

9. To participate in regional and national incident response forums, sharing information, best practices, and threat intelligence with other CSIRTs and government agencies. To contribute to the development of a strong incident response community within Madhya Pradesh.

10. Assist in managing communication including sensitive information handling, public perception management, and reputational damage mitigation.

11. Develop recommendations for enhancing future incident response communication strategies.

12. Any other responsibilities assigned by Director/ Joint Director, SCSIRT.