Security Incident Coordinator - hybrid

• Serve as the primary coordinator for major cybersecurity, Trust & Safety, and fraud incidents.
• Organize incident-related tasks, track progress, and maintain clear communication across involved teams and stakeholders using ServiceNow Security Incident Response (SIR).
• Coordinate the full incident lifecycle, including:
• Containment
• Eradication
• Recovery
• Closure
• Ensure containment is validated against our clients control-testing standards before an incident is marked resolved.
• Develop, maintain, and enforce incident response playbooks and protocols.
• Partner with SOC capability champions across:
• Insider Risk
• Escalations
• Digital Forensics & Incident Response (DFIR)
• Ensure consistency across incident response processes without duplicating existing technical ownership.
• Produce regular incident reporting, ranging from operational status updates to Board and Senior Leadership Team (SLT) summaries.
• Clearly document actions taken, incident outcomes, and recommendations for improvement.
• Lead the lessons-learned process by facilitating post-incident hot washes.
• Convert post-incident findings into documented action items.
• Drive updates to reports and playbooks on a regular cadence.
• Provide clear and comprehensive documentation and updates to internal partners, including:
• IT
• Legal
• Compliance
• Customer Support
• Support onboarding and training for team members on incident response protocols and tooling.
• Reinforce adherence to established SOC processes.
• Stay current on incident response, fraud, and Trust & Safety best practices.
• Help adapt SOC processes as threats and business requirements evolve.

Our client is seeking a detail-oriented and organized Security Incident Coordinator to join the Security Operations Center (SOC) within Threat Operations., * Minimum 3 years of experience in incident coordination, security operations, or a closely related field.

• Demonstrated ability to manage multiple concurrent incidents, tasks, and stakeholders in a high-pressure environment while maintaining accuracy and composure.
• Working knowledge of incident response procedures across:
• Cybersecurity
• Trust & Safety
• Fraud
• Excellent organizational skills.
• Strong written and verbal communication skills.
• Ability to translate technical information for non-technical audiences and communicate business requirements to technical teams.
• Ability to work effectively across Insider Risk, Escalations, and DFIR functions without directly owning those technical domains.

Preferred Qualifications

• Experience with ServiceNow Security Incident Response (SIR) or a comparable ITSM/SIR platform.
• Relevant professional certifications, including:
• PMP
• ITIL
• CISM
• GCIH

Education

• Bachelor’s degree in Information Security, Computer Science, Management Information Systems, or a related field, or equivalent experience.