Cyber Incident Response Commander
Core
Leading the organization's response to cybersecurity incidents by coordinating cross-functional teams, managing incident lifecycles, and ensuring alignment with policies and regulatory requirements.
Role type
Senior Incident Response Commander (CERT/CSIRT)
Builds
Incident response playbooks, governance frameworks, and coordinated response actions for security events.
Domain
Cybersecurity / Incident Response / Maritime & Logistics
Deliverable
client delivery
Required skills
Incident response methodologies (NIST, ISO 27035, SANS), forensic investigations, security tool usage, risk assessment, stakeholder communication, regulatory compliance
Preferred skills
Experience in transport, shipping, or logistics environments
Technologies
NIST, ISO 27035, SANS frameworks
Responsibilities
Act as Incident Commander during security incidents, maintain and improve Incident Response Plans (IRP), develop incident response playbooks, oversee forensic investigations and evidence collection, communicate with senior leadership and stakeholders, support internal and external audits
Seniority
Senior, hands-on leadership