Incident Response & Risk Manager - Moodle US

Moodle with us!

We're the world's most popular learning platform and we’re on a mission to empower educators to improve our world.

Find out about your new workplace...

Moodle is the world’s most trusted online learning solution. The engine of our ecosystem is Moodle LMS, the secure and customizable open source learning management platform used by over 250 million learners worldwide. Developed in conjunction with our community, Moodle LMS is complemented by an ecosystem of products including Moodle Workplace and a network of partners and services providing hosting, customizations and support. We also teach and support educators to create effective online learning experiences and share open education resources. Collectively, we empower educators to improve our world.

Moodle US, a newly formed US-based services division of Moodle Pty, provides services in learning design, implementation support, training, hosting, custom development, and support for Moodle LMS, Moodle Workplace, as well as other Moodle products.

We’ve built a passionate team of hard-working and driven people from all over the world, united by a shared belief in the ability of our platform to make a positive difference to our world. We respect our colleagues and value an open and innovative workplace, filled with integrity and of course a strong focus on education (yes, these are our company values!)

Find out more about us on our website.

What your new role can look like…

The Incident Response Manager manages the complete lifecycle of the incident response process, from initiation to conclusion. Assesses the nature of the incident, determines what resources are needed, and coordinates all efforts to resolve the situation and restore service. Leads communications with the various stakeholders and performs documentation in accordance with established methodologies. Being a Risk Analyst II performs risk analysis studies of an organization's cybersecurity posture and business strategies in order to maintain maximum protection of an organization's assets. Evaluates and forecasts potential losses while determining solutions to mitigate risks.

Please note, as this role will be deeply involved in our Fed RAMP certification process, the individual hired must be a US person (citizen or legal permanent resident). Additional responsibilities involving global projects will require availability to meet with global stakeholders during alternative time zone working hours.

With the pace of Moodle, no two days will ever be the same! You will...

• Develop, implement and maintain the global cyber risk quantification program, and vendor risk management program; performing risk analysis studies to inform business strategy and maintain acceptable protection of an organization's assets.
• Evaluates and forecasts potential losses while determining solutions to minimize or eliminate risks.
• Continuously monitor the security industry to remain current in frameworks, risk management practices and solutions, and assist in the continuous assessment and improvement of all department policies, processes and procedures.
• Continuously monitor, audit, evaluate and improve the technical controls under administration by this position.
• Establish performance indexes (KPI, OKR, KRI, etc) and other risk metrics for quantitative measurement.
• Manages the global incident response program including the complete lifecycle of the process, from initiation to conclusion and documentation.
• Assesses the nature of the incident, determines what resources are needed, and coordinates all efforts to resolve the situation and restore service.
• Routinely interface with stakeholders and leaders for successful delivery of all services and programs under administration by this position.
• Be solutions oriented, highly organized and self motivated, with the ability to prioritize and achieve tight deadlines.