Cybersecurity Major Incident Manager
Core
Leads incident management across a distributed, follow-the-sun operating model, ensuring consistent execution, rapid response, and post-incident governance for cybersecurity major incidents.
Role type
Senior IC Cybersecurity Major Incident Manager
Builds
Global incident response coordination, CSOC operating models, and continuous improvement programs for security operations.
Domain
Cybersecurity Operations / Incident Response
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Incident response lifecycle management, distributed team leadership, cross-functional coordination, post-incident analysis (AAR/RCA), regulatory compliance, executive communication, process improvement, metric tracking (MTTR, closure quality), external vendor management
Preferred skills
Incident management platform experience, AAR framework expertise, knowledge of U.S. and international regulatory environments, 24x7/follow-the-sun operational experience
Technologies
Incident management platforms, AAR frameworks
Responsibilities
Lead incident response support and coordination across regions; Build and maintain the CSOC IM operating model; Manage and develop a distributed team of Incident Coordinators and Managers; Establish follow-the-sun operating rhythms; Provide leadership for integration of vulnerability management and threat monitoring; Drive cybersecurity operational maturity across newly integrated businesses; Serve as senior incident coordinator for high-severity incidents; Coordinate incident response activities per the Incident Response Plan; Own incident closure quality and documentation; Lead After-Action Reviews (AARs) and translate outputs into Cybersecurity Action Plans (CAPs); Provide executive-ready updates; Partner with Legal for post-incident oversight; Assess operational gaps and drive process improvements; Define and track key metrics; Establish reporting on incident trends; Ensure alignment with regulatory requirements; Manage relationships with external incident response providers; Lead, coach, and develop a high-performing global team
Seniority
Senior, hands-on IC with team leadership
