Flex is the diversified manufacturing partner of choice that helps market-leading brands design, build and deliver innovative products that improve the world.

A career at Flex offers the opportunity to make a difference and invest in your growth in a respectful, inclusive, and collaborative environment. If you are excited about a role but don't meet every bullet point, we encourage you to apply and join us to create the extraordinary.

Job Summary

The IT Manager role is required to act as the regional cybersecurity Digital Forensics & Incident Response (DFIR) manager leading response teams formed during an identified cybersecurity incident/case. The manager will handle large-scale incidents, events or investigations requiring cross-team coordination and communication.

What a typical day looks like:

• You will coordinate the response to cyber security incidents; following standard incident response phases: prepare, identify, contain, eradicate, recover, lessons learned;
• You will perform cybersecurity incident response triage and handling by determining scope, urgency and potential impact to Flex; thereafter identifying the specific vulnerability and recommending actions for expeditious containment, eradication, remediation/recovery;
• Investigating escalated incidents using all available information from Flex information technology systems and security systems such as OS logs, application logs, firewall, IPS, sand boxing, host security, network devices, vulnerability management, compliance management, DLP and network forensics;
• You will establish oversight of cybersecurity incidents and communicate analysis, containment, and remediation efforts to all involved business partners; escalating incidents to management in a timely manner with appropriate information regarding risk, action times, and root cause analysis;
• You will determine the root cause of incidents and work with business or technology groups to remedy any identified control gaps or failures;
• Preserving, harvesting, processing, and analyzing electronically stored information (ESI) from various electronic data sources such as laptops, desktops, servers, and small form factor mobile devices according to policies, procedures, and best practices;
• Continually develop cybersecurity policies and procedures documentation related to cybersecurity incident response. Create and maintain policies, procedures, guidelines, and lead projects that ensure continued compliance with all applicable corporate policies, procedures, state and federal laws and regulations;
• You will maintain a high level of professionalism in all areas of performance.
• You will maintain proficiency with industry standard cybersecurity incident response tools and practices; evaluation of the same;
• Developing and broadening the cybersecurity incident response skill set through training, industry collaboration, and research;
• Attending and presenting in-house training and awareness of Global Cybersecurity policies and procedures.