Incident Response Manager

About the role

Manager, Incident Response in a cybersecurity advisory practice.

Responsibilities

• Lead and coordinate cyber incident response activities, including triage, containment, eradication, and recovery.
• Manage investigations of threats such as ransomware, data breaches, insider threats, and persistent threats.
• Oversee client communication, executive briefings, war-room facilitation, and stakeholder management during high-impact incidents.
• Conduct root cause analysis, develop remediation plans, and integrate findings into cyber resilience strategies.
• Track performance metrics, improve incident response playbooks, and enhance service offerings.
• Collaborate with threat management, governance, risk, compliance, privacy, and technology teams; mentor incident response personnel.
• Act with professionalism, integrity, and responsibility, maintaining a respectful work environment.

Qualifications & Skills

• Minimum five years of experience in cybersecurity incident response or cyber threat management.
• Bachelor's degree or equivalent work experience; advanced degrees are a plus.
• Proven expertise in leading cyber investigations, managing escalations, and applying frameworks such as NIST and SANS.
• Hands-on experience with security tools like SIEM, EDR, DLP, network security, and threat intelligence platforms.
• Strong stakeholder engagement, communication skills, and ability to present to senior leadership.
• High integrity, judgment, and ability to handle sensitive information.
• Authorized to work in the U.S. without sponsorship.