Commandant·e de réponse aux incidents cyber / Cyber Incident Response Commander

Overview of the role

The Cyber Incident Response Commander leads the response to information security incidents within the Computer Emergency Response Team (CERT) of one of Sopra Steria’s major clients, a global leader in shipping and logistics. This is a permanent, full-time position with Sopra Steria, embedded in the client’s team and reporting to the Incident Response Manager.

The role involves bringing business and technical teams together, assessing incident severity, coordinating containment and recovery, and keeping leadership informed. Between incidents, the position strengthens the client’s Incident Response Plan, playbooks and processes.

Expected start date: January 4, 2027

Key Responsibilities

• Act as Incident Commander during security incidents and coordinate business and technical teams.
• Assess, analyse and prioritise incidents, and formally declare major incidents based on risk and regulatory criteria.
• Manage incidents in line with the Incident Response Plan and playbooks.
• Prioritise forensic activities and follow mitigation and recovery efforts through to resolution.
• Communicate, notify and report on incidents to stakeholders, management and executives.
• Maintain the Incident Response Plan and its appendices.
• Refine incident playbooks and write scope-specific Incident Response Plans for vessels, regions or subsidiaries.
• Work with legal and communications departments to improve incident response processes.
• Gather lessons learned, establish links between incidents and recommend improvements.
• Provide evidence to internal and external auditors.
• Contribute to Cyber Defense Center collaboration activities and CERT-related projects, improvements and compliance efforts.

Required Skills

• 5+ years of experience in a similar role, such as CERT, SOC, SecOps or GRC.
• Strong understanding of incident management methodologies, including ISO 27035, the NIST framework or the SANS six-step process.
• Knowledge of SOC operations, forensic techniques and security tools.
• Relevant cybersecurity certifications, such as GCFA, ECIH, CISSP, CEH, ECSA or ITIL Foundation.
• Degree in a STEM field, cybersecurity or equivalent.
• Ability to remain calm under pressure and think clearly during crises.
• Ability to communicate security matters to management and executives.
• Excellent written and verbal English communication skills, with strong analytical and synthesis abilities.
• Autonomy, proactivity, leadership and discretion when handling sensitive matters.
• Ability to work in an international environment with offshore teams.

Nice to have

• Experience in transport, shipping or logistics.
• Experience in consulting or client-facing environments.
• Experience building or maintaining incident response plans and playbooks for multi-site or international organisations.

About Sopra Steria

Sopra Steria is a major European technology company providing consulting, digital services and solutions. It has 51,000 employees in nearly 30 countries, and its Canadian operations deliver cybersecurity, cloud and infrastructure, SAP and enterprise applications, data and AI, and digital transformation solutions.

Sopra Steria Canada offers competitive compensation, a fully covered benefits package, paid time off, a transportation allowance, learning and career development opportunities, and a hybrid work environment.