Director of Cybersecurity & Incident Response

About the Role
Lead and improve the organization’s cybersecurity program by managing risk, security operations, incident response, and compliance to protect systems, data, and users.

Key Performance Indicators:

• Reduce critical vulnerabilities through remediation
• Improve incident response times and outcomes
• Achieve compliance with security standards
• Increase security awareness and user behavior
• Strengthen security monitoring and threat detection

Responsibilities:

• Lead the management of incident response and security operations
• Ensure compliance with security frameworks and risk management practices
• Manage vulnerability assessments, including scanning and patching
• Develop and maintain incident response tooling and playbooks
• Enhance security monitoring and threat detection methodologies
• Foster a culture of security awareness within the organization
• Establish strong communication channels for reporting security incidents
• Provide leadership and stakeholder management to drive initiatives
• Implement process improvements to enhance accountability and effectiveness

Qualifications
Required Qualifications:

• 7+ years in cybersecurity with leadership experience
• Experience managing incident response and security operations
• Strong knowledge of security frameworks and risk management
• Working knowledge of compliance (e.g., ISO 27001, NIST)
• Relevant certifications such as CISSP, CISM, or equivalent
• Proficiency in SIEM/SOC operations and vulnerability management (scanning, patching)
• Experience with threat modeling and risk assessment
• Knowledge of network, endpoint, and cloud security
• Experience using incident response tooling and maintaining incident playbooks
• Demonstrated leadership, stakeholder management, and process improvement skills
• Strong analytical problem-solving and clear communication/reporting skills