> Markdown version of [/jobs/ext/4676083-manager-incident-response](https://www.wearedevelopers.com/jobs/ext/4676083-manager-incident-response). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Manager, Incident Response

- **Company:** Kpmg LLP
- **Location:** Chicago, IL, United States
- **Experience:** Expert
- **Salary:** $114,095 - $268,180
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Cloud Computing, Cyber Security, Enterprise Software Applications, Cyber Warfare
- **Published:** November 11, 2026
- **Apply:** https://www.kpmguscareers.com/jobdetail/?jobId=139933

## About the Role

* Minimum of five years of experience in Information Security or in a technology related field with hands-on experience with developing and delivering Incident response capabilities in large complex global multi nationals.
 * Bachelor's degree from an accredited college/university or equivalent experience; Incident response, security operations, cyber security, cyber defense, and/or technical infrastructure certifications. GIAC certification or equivalent is preferred.
 * Team members are expected to navigate technology ecosystems across client environments, understanding core cyber capabilities, Identity, Network, Cloud, AI and enterprise systems.
 * Ability to collaborate, learn and work with cross functional teams like system administrators, External Counsel, Insurance carriers, and cyber security functions to support the containment, remediation, recovery and resilience cycle for clients during high stress and challenging events.
 * Experience designing and optimizing enterprise-scale incident response processes for time and/or cost efficiency
 * Willingness to take a critical eye to security tooling capabilities and present defendable, technical justifications for decisions and designs
 * Ability and willingness to travel, work in a fast paced, results driven environment, grasp new technology, and contribute at a rapid pace
 * Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)

## Description

* Lead planning, and execution of Cyber Incident response and Recovery. Enabling Management of client Forensic investigations; Managing data gathering for Forensic investigations
 * Define guidance on Incident response, assisting clients with defining the immediate containment activities, deploying KPMG capabilities to identify and respond to malicious activities of cyber bad actors.
 * Managing activities aimed at reducing client attack surface during the incident. Identifying and supporting Recovery tasks, to restore client services to Minimum viable business process, restore to Business as usual and provide the client with resilience build out.
 * Responsible for the expansion of the IR&R services with playbooks and focus on adapting them to modern threats as they evolve
 * Facilitate delivery of incident response projects; act as coordination manager for Incident response where needed
 * Prepare and update the run books, processes and procedures to support the Incident response team; Present firm-based approaches and messaging at internal training classes, external events, and client meetings.
 * Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment