Incident Response Program Lead

Job Summary

Leading the development and operation of a security incident response program, the full-time remote Incident Response Program Lead will coordinate responses to security incidents, oversee vendor governance, and serve as a trusted advisor to the Information Security Manager and cross-functional partners.

Key Responsibilities

• Own and continuously improve the Security Incident Response program, including policies, plans, and incident documentation
• Serve as the incident lead during security and compliance incidents, coordinating investigation and recovery efforts
• Oversee MSSP governance and performance, ensuring adherence to contractual requirements and service metrics

Required Qualifications

• Five or more years of experience in information security, particularly in incident response and security operations
• Demonstrated experience leading security incidents across technical and business teams
• Experience working with an MSSP, MDR provider, or SOC
• Working knowledge of security monitoring, SIEM, and cloud security, particularly in AWS environments
• Familiarity with recognized security frameworks such as NIST CSF and incident response processes