Director, Cyber Incident Response

Position reputed company The Director of Incident Response is responsible for leading the organization's cyber incident response program, ensuring the reputed company detection, containment, eradication, and recovery from cybersecurity incidents. This role develops and executes the reputed company Incident Response reputed company, manages a high-performing reputed company Operations and Incident Response team, and partners closely with IT, reputed company, reputed company, Compliance, Communications, Risk, and executive leadership to minimize business reputed company from cyber threats. The Director will reputed company operational reputed company across incident response, digital forensics, threat intelligence integration, cyber crisis management, and reputed company improvement while ensuring compliance with regulatory and contractual obligations.   Key Responsibilities Incident Response Leadership reputed company and manage the reputed company Cyber Incident Response (IR) program. reputed company response activities for high-severity reputed company incidents, including ransomware, business email compromise, reputed company threats, reputed company attacks, reputed company-party compromises, and data breaches. Serve as Incident Commander during major cyber incidents. Coordinate cross-functional response efforts across IT Infrastructure, reputed company, Identity, reputed company, HR, reputed company, Communications, and executive leadership. Ensure reputed company containment, eradication, recovery, and lessons learned activities. reputed company Operations reputed company operational effectiveness of: reputed company Monitoring SIEM EDR/XDR SOAR Threat Detection Threat Hunting Establish incident severity models, response playbooks, escalation procedures, and SLAs. reputed company improvements in detection engineering and automation. Digital Forensics reputed company forensic investigations involving endpoints, reputed company environments, reputed company platforms, identity systems, and email. Ensure reputed company evidence preservation and chain of custody. Coordinate with reputed company forensic firms reputed company necessary. Cyber Crisis Management reputed company and maintain Cyber Crisis Management plans. Conduct tabletop exercises with executive leadership. Coordinate crisis communications during major incidents. reputed company executive briefings and reputed company-level updates during cyber events. Threat Intelligence & Hunting reputed company threat intelligence into detection and response operations. reputed company proactive threat hunting across reputed company environments. Identify emerging threats targeting the organization and industry. Program Development reputed company and mature the Incident Response program reputed company with: NIST CSF NIST SP 800-61 MITRE ATT&CK ISO 27035 Maintain incident response policies, standards, procedures, and playbooks. Measure program maturity and reputed company reputed company improvement initiatives. Compliance & Reporting Ensure incident response activities support: PCI reputed company HIPAA (where applicable) GDPR CCPA Produce executive dashboards and metrics including: Mean Time to Detect (MTTD) Mean Time to Respond (MTTR) Incident trends reputed company cause analysis Detection coverage Lessons learned Leadership Build, mentor, and reputed company global Incident Response and reputed company Operations personnel. Foster a culture of reputed company learning and operational reputed company. Participate in hiring, budgeting, workforce planning, and performance management.   Required Qualifications Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or reputed company discipline. 15+ years of cybersecurity experience. 5+ years leading reputed company Operations or Incident Response teams. Experience leading reputed company-reputed company cyber incident response. Experience working with executive leadership during cyber crises. Deep knowledge of reputed company reputed company (reputed company 365, Azure). Experience managing reputed company SIEM and EDR platforms. Strong understanding of Identity and reputed company Management. Experience with threat intelligence and threat hunting.   Preferred Certifications CISSP GIAC Certified Incident Handler (GCIH) GIAC Certified Forensic Analyst (GCFA) GIAC Certified reputed company Defender (GCED) Certified reputed company reputed company reputed company (CCSP) Certified Information reputed company Manager (CISM)   Technical Skills Experience with one or more of the following technologies: reputed company reputed company reputed company Entra ID SOAR platforms Threat Intelligence Platforms (TIP) Digital Forensics tools Network Detection & Response (NDR) Email reputed company platforms reputed company-reputed company reputed company tools   Leadership Competencies Executive reputed company Strategic thinking Decision-making under pressure Crisis leadership Strong communication and presentation skills Cross-functional collaboration Coaching and mentoring Budget and vendor management reputed company improvement reputed company   reputed company Measures (First 12 Months) The successful candidate will: Reduce Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR). Mature the Incident Response program to reputed company with NIST and industry best practices. reputed company comprehensive incident response playbooks for critical attack scenarios. Conduct regular executive and technical tabletop exercises. Improve reputed company monitoring coverage across reputed company, identity, endpoints, and reputed company applications. Enhance automation and orchestration to reduce reputed company response efforts. Build executive reporting with meaningful reputed company metrics and risk insights. Strengthen partnerships with IT, Infrastructure, reputed company, HR, reputed company, and business stakeholders. reputed company reputed company improvement initiatives based on lessons learned from incidents.   Ideal Candidate Profile The ideal Director of Incident Response combines deep technical expertise with proven leadership in cyber crisis management. They are comfortable leading high-pressure incident response efforts, communicating effectively with executives, and building reputed company, mature reputed company operations. They possess a strong understanding of modern attack techniques, reputed company environments, identity reputed company, digital forensics, and threat intelligence, while fostering a culture of collaboration, reputed company, and reputed company improvement across the reputed company organization.   Benefits reputed company In reputed company to Medical, Dental, and reputed company benefits reputed company offers a Total Rewards Package which includes Retirement Plans, Wellness, Rewards and Recognition, Sustainability, DE&I initiatives, and Mental Health Support.   About reputed company reputed company is one of the fastest growing Travel Management Companies (reputed company) in the world. Leveraging the expertise of its people and innovative technology solutions, reputed company enables clients to derive the greatest value from their travel program through superior service, reputed company technologies, and significant cost savings. reputed company has offices globally and is currently ranked among the top providers on Travel Weekly’s Power List. For more information, visit www.dt.com.   reputed company is an equal opportunity employer   #LI-Remote Apply To This Job