Incident Response Manager

We're seeking an Incident Response Manager to lead our organization's response to security incidents. You'll act as the central incident lead, coordinating communication, investigations, and remediation efforts while working closely with our SOC provider and forensic partners.

What You'll Do

• Lead incident response from detection through recovery and closure
• Act as incident commander during bridge calls, war rooms, and stakeholder updates
• Oversee forensic investigations, ensuring proper evidence handling and documentation
• Partner with SOC and forensic providers on root cause analysis and impact assessment
• Coordinate with IT, cloud, application, and security teams to support remediation
• Track incident actions, owners, and timelines to ensure accountability
• Provide timely updates to leadership, legal, and compliance teams
• Drive post-incident reviews and lessons learned
• Maintain and improve incident response playbooks and readiness activities, * Impact: Be the frontline leader protecting our organization during critical security events.
• Growth: Advance your expertise in incident response and forensics while shaping our security program.
• Culture: Work with a collaborative team that values resilience, transparency, and continuous improvement.
• Multinational Reach: Work within a global company where your decisions safeguard operations across multiple regions.
• Workplace Excellence: Enjoy a dynamic, inclusive culture with opportunities for professional development, cross-border collaboration, and long-term career growth.

Do you have experience in Incident response?, * Experience in incident response, forensics, SOC, or security operations

• Strong technical knowledge across networks, cloud (AWS), Linux, and Windows
• Understanding of forensic principles and investigation methodologies
• Ability to lead cross-functional teams under pressure
• Excellent communication and stakeholder management skills
• Confident decision-making during live incidents

Preferred

• Background as a SOC Analyst or DFIR professional moving into leadership
• Experience managing outsourced SOC or forensic providers
• Familiarity with SIEM, EDR, and forensic tools
• Knowledge of regulatory, legal, or breach notification processes
• Relevant certifications (e.g., GCIA, GCED, GCFA, GCIH), * Incident response: 5 years (preferred)