Incident Response Manager

About the role

Manager, Incident Response within a cybersecurity advisory team.

Responsibilities

• Lead and manage cyber incident response activities, including triage, containment, eradication, and recovery for client incidents.
• Oversee investigations of threats such as ransomware, data breaches, insider threats, and persistent threats.
• Coordinate incident response engagements, including client communication, executive briefings, war-room facilitation, and stakeholder management.
• Conduct incident investigations, root cause analysis, and develop actionable remediation plans integrated with cyber resilience practices.
• Manage incident response performance, define metrics, track SLAs, and enhance response methodologies and service offerings.
• Collaborate across cyber, risk, governance, privacy, and technology teams while mentoring incident response personnel.
• Uphold professionalism, integrity, and a respectful work environment.

Qualifications & Skills

• Minimum five years of experience in cybersecurity incident response or threat management.
• Bachelor's degree or equivalent work experience; advanced degree preferred.
• Proven leadership in cyber investigations, managing escalations, and applying established frameworks (e.g., NIST, SANS).
• Hands-on experience with SIEM, EDR, DLP, network security, and threat intelligence tools.
• Strong stakeholder management, communication skills, and ability to present to senior leaders.
• High integrity, professionalism, and ability to handle sensitive information.

Authorized to work in the U.S.; no sponsorship provided.