Incident Response Oversight Expert

About the role

We are seeking a senior leader to oversee and direct major cyber incident response activities. This role focuses on strategic oversight, team quality assurance, and strengthening enterprise or national cyber resilience, not on day‑to‑day SOC analysis.

Key responsibilities

• Lead major Cyber Incident Response and CSIRT engagements from detection through recovery.
• Provide analyst quality assurance and overall team oversight.
• Coordinate large‑scale incident containment, recovery, and post‑incident remediation.
• Develop and maintain incident response playbooks, governance frameworks, and IR standards.
• Manage cyber crisis situations, stakeholder communication, and executive briefings.
• Design and run tabletop exercises, workshops, and cyber drills.
• Conduct post‑incident reviews and ensure remediation actions are tracked.
• Drive project and program management for incident response initiatives.

Required profile

• Minimum 12 years of experience in cyber incident response leadership.
• Bachelor’s degree required; Master’s degree preferred.
• At least two relevant certifications (e.g., CISSP, CISM, GCTI, GX‑IH, GX‑CS, GSLC, GSTRT, GSNA, GISP, ISO 27035 Lead Incident Manager).
• Strong knowledge of IR frameworks, standards, and regulations.

Required skills

• Incident Response
• Cybersecurity
• CSIRT leadership
• Crisis Management
• Project/Program Management
• IR frameworks (e.g., ISO 27035)