Director I - Cybersecurity Operations & Incident Response
Core
Leading enterprise cybersecurity monitoring, security incident response, and investigative operations across a 24x7 SOC and CSIRT model.
Role type
Director, Cybersecurity Operations & Incident Response
Builds
Enterprise security monitoring capabilities, incident response workflows, and high-performing security operations teams.
Domain
Healthcare / Cybersecurity Operations
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
IT management, SOC leadership, incident response lifecycle management, team building, regulatory compliance, strategic reporting
Preferred skills
24x7 SOC leadership, incident response lifecycle expertise, CISSP/CISM/GCIH/GCFA/GCIA certifications, healthcare regulatory knowledge
Technologies
SIEM, cloud security monitoring, identity management, digital forensics, threat intelligence platforms
Responsibilities
Lead 24x7 SOC and CSIRT operations; coordinate incident response with IT, Legal, Privacy, and Compliance; brief CISO and senior leadership on incidents; oversee security monitoring and investigations; manage operational readiness for major events; support regulatory audits; develop strategic reports; hire and develop direct reports.
Seniority
Director, strategic leadership with hands-on operational oversight