Sr Incident Manager

The Senior Incident Manager is a member of and 100% dedicated to the Global Security Organization's CBSO ESI Incident Management team and is responsible for the coordination and documentation related to business security incidents. This includes prioritizing, coordinating, and documenting the details of identified technical security incidents. The Senior Incident Manager will act as a single point of contact for the Business Security Incident Response Team during a reported business security incident and will work with the following teams: business unit management and Incident Response Teams, global security organization, communication, and legal teams to drive and ensure execution of activities within the framework of the business incident response process. The Sr Incident Manager will need to make work within the BSIRT framework to assist in making decisions based on established ADP security policies and standards with respects to technical security incident reporting, internal escalations and internal notifications, as well as maintain, review and update the Incident Response Procedures (Playbooks). The duties performed by the Sr Incident Manager are instrumental in assisting ADP's business units with meeting client service level agreements, contractual and regulatory obligations. The Sr Incident Manager interacts extensively with, and provides consultative support to, a wide range of ADP associates and management on technical security incident procedures. The person in this role will maintain a strong working relationship with the business, products services, IT, and GSO groups to partner in the execution of business security incident response activities, root cause determination and identification of applicable remedial actions. The expectation is that the Sr Incident Manager is able to fulfill the following functions effectively and timely, often times with discretion but always with high-quality. The execution of these functions is critical to client retention, client relationship and ADP's brand.

Essential Responsibilities:

- Coordinate escalated business security incidents that expose or could expose confidential/sensitive, by coordinating with the different stakeholders and experts from GETS, GSO and BU's impacted. All cases must be handled in a timely and appropriate manner, and in compliance with applicable ADP policies and incident handling procedures. Provide thorough analysis of business security incidents to define scope, risks and impacts;
- Develop and/or contribute to the communication content for root cause analysis documents, talking points for client account teams, interim communications during business security incident management, external communications (i.e. client notification letters), and Client Talking Points/FAQ's;
- Continually improve and automate aspects of global business security incident management, including identification, root cause analysis and remediation. Participate in periodic individual business unit calls to discuss aging cases, open remediation plans, and other significant issues;
- Ensure all business security incidents are tracked and updated with appropriate incident details; relevant documents (e.g., reports, client letters, and sample reports) are reviewed and attached to the case where appropriate and documentation in the case is accurate and updated as information is collected.

Education/Experience:

- BA/BS degree or equivalent or equivalent job experience;
- 5-10 years of ADP Business Operations, Security, Risk, Compliance or like discipline of operational and business experience;
- Background in financial services, HR/payroll, business process outsourcing.

Generic Skills:

- Experience in incident management and response including but not limited to analysis, containment, documenting investigation results. Exceptional organizational direction, time management, problem-solving, prioritization, goal setting, leadership and motivation, negotiation, interpersonal relations, verbal/written communications and human resource management skills;

Technical Skills:

- Familiar with security and IT related technologies: Archer or equivalent platform/tool experience; Networking, Windows Server and Desktop OS; Active Directory; Client/Server; Relational Databases, etc. Ability to interact effectively with technical and non-technical audiences via both verbal and written communications (e.g., technical writing, procedural development, requirements analysis);
- Awareness of relevant compliance area (e.g. HIPAA, Privacy, PCI);
- Ability to identify and ensure the timely delivery of critical information to internal analysis teams, sponsors, customers, and other interested parties. Ability to effectively prioritize work. Ability to develop and explain technical decisions. Ability to recognize and deal appropriately with sensitive and confidential information.

LI-TM1 #LI-Hybrid

**Diversity, Equity, Inclusion & Equal Employment Opportunity at ADP**: ADP affirms th