Incident Response Manager

Manager of Incident Response within a cybersecurity advisory practice.

Responsibilities

• Lead cyber incident response activities including triage, containment, eradication, and recovery.
• Oversee investigations into threats such as ransomware, data breaches, and insider threats.
• Coordinate incident response engagements and manage client communications.
• Facilitate high‑pressure war‑room situations.
• Collaborate with legal, forensic, privacy, and leadership teams.
• Conduct root cause analysis and develop improvement plans.
• Integrate findings into broader cyber resilience strategies.
• Manage incident response performance, track service‑level agreements, and enhance response methodologies.
• Lead within the Cyber & Tech Risk practice, mentor team members, and partner across various risk functions.

Qualifications

• Minimum of five years of experience in cybersecurity incident response or threat management.
• Proven experience leading investigations of ransomware, data breaches, insider threats, and related incidents.
• Expertise with security tools such as SIEM, EDR, and DLP solutions.
• Strong stakeholder communication and client‑facing skills.
• Demonstrated professionalism and integrity.
• Authorized to work in the United States without sponsorship.