Senior Director, Digital Forensics & Incident Response
Core
Own AstraZeneca's global capability to respond to and investigate cyber incidents across cloud, on-premises, and OT/ICS environments, leading the build of the internal DFIR function from a near-zero baseline.
Role type
Senior Director, Digital Forensics & Incident Response (Build & Leadership)
Builds
Enterprise incident response capability, global CSIRT, forensic standards, and automation/AI playbooks for triage and eradication.
Domain
Cybersecurity, Digital Forensics, Incident Response, Operational Technology (OT/ICS), Regulated Healthcare (GxP)
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure | physical/clinical work
Required skills
Incident command and lifecycle management, digital forensics and evidence handling, attacker tradecraft (MITRE ATT&CK), automation and AI in security operations, cloud/identity/endpoint visibility, OT/ICS response coordination, legal/regulatory crisis communication, vendor and retainer management
Preferred skills
None explicitly stated
Technologies
SIEM, SOAR, XDR, LLM, agentic capabilities
Responsibilities
Act as accountable commander for material cyber incidents; define incident strategy, roadmap, and budget; ensure forensic defensibility of evidence; run readiness exercises; guarantee 24x7 coverage; operationalize automation/AI for triage; report metrics to senior leadership; build and staff the DFIR function; manage Director-level leaders and talent development.
Seniority
Senior Director, hands-on IC with extensive leadership and build responsibilities
