Crisis & Cyber Response Manager

Molina Healthcare•Long Beach, CA

About The Position

The Crisis & Cyber Response Manager executes and maintains Molina’s crisis and cyber incident management lifecycle. The role implements right-sized strategies and solutions to support rapid operational response and works with internal functions and external partners to develop, maintain, and improve incident and crisis plans, playbooks, strategies, policies, and procedures. The manager prioritizes the response roadmap, identifies resource needs, coordinates response communications, and facilitates walkthroughs, tabletop exercises, simulations, and full-scale exercises. The position also supports and manages response activities during disruptive cyber events as needed. The ideal candidate has significant experience leading moderate- to large-scale third-party cyber incidents from a crisis-management perspective and enterprise-wide responses to severe weather, natural disasters, civil unrest, and brand or reputation crises. The role delivers day-to-day crisis management and cyber crisis response program activities, provides guidance to enterprise leaders and employees, leads or coordinates responses affecting Molina’s people, property, systems, or facilities, and supports projects and risk-mitigation programs that strengthen organizational resiliency.

Requirements

At least 7 years of operational experience across multiple cybersecurity disciplines and crisis management, including at least 3 years of corporate business experience in cyber response, incident response, crisis management, and/or disaster recovery, or an equivalent combination of relevant education and experience.
Experience conducting risk assessments, business process work, or control auditing.
Strong documentation, detailed tracking, executive briefing, and reporting skills.
Practical understanding of network architecture design, logical access controls, vulnerability management, encryption, and cloud computing.
Strong problem-solving and analytical abilities, including evaluating information from multiple sources, reconciling conflicts, decomposing high-level information into details, and applying business knowledge.
Strong organizational skills, initiative, multitasking and project-management abilities, and attention to detail.
Ability to work collaboratively, build and maintain customer relationships, and work with geographically distributed team members.
Demonstrated focus on developing and implementing processes across organizational boundaries.
Data analysis experience and ability to create value-added metrics and reporting.
Hands-on experience in cyber incident response, disaster response, and crisis management.
Understanding of cyber response and recovery stages and incident response planning, testing, and exercises.
Situational awareness and ability to respond to incidents that threaten the company, property, data, or people.
Experience with risk management and cyber response software or systems.
Familiarity with cyber trends such as ransomware, malware, phishing, and insider threats.
Familiarity with ChatGPT and Copilot and using AI for research.
Familiarity with industry best practices and standards for cyber and crisis events.
Strong project management experience and skills.
Strong verbal and written communication skills and ability to present information to internal and external stakeholders.
Proficiency with Microsoft Office and applicable software programs.

Nice To Haves

Deep experience with cybersecurity and crisis management industry-standard tools and concepts.
Business Continuity Institute (BCI) and/or Disaster Recovery Institute International (DRII) certification.
Certified Information Systems Auditor (CISA) and/or Certified Information Systems Security Professional (CISSP).

Responsibilities

Drive commitment, support, ownership, accountability, and results for cyber response, incident response, and crisis management activities.
Assist with documentation for cyber response and incident management programs, including policies, procedures, frameworks, templates, and instructions that support regulatory requirements.
Document standard operating procedures, incident response playbooks, and escalation protocols.
Validate and test response strategies, identify gaps, and communicate results to leadership.
Review and provide input on enterprise response systems, tools, and services, including out-of-band options.
Conduct research and analysis to support cyber and incident response programs and projects.
Develop and conduct employee incident response training.
Support enterprise threat and cyber crisis response activities, including incident notifications and situational updates, emergency notifications, threat monitoring and analysis, stakeholder notifications, cyber incident response team coordination and minutes, state-specific response leadership, and support for impacted business operations.
Prepare comprehensive, timely, and detailed after-action and test reports.
Analyze trends across incidents and exercises and recommend improvements.
Periodically test continuity tools, including out-of-band notification and incident communications tools, and ensure readiness.
Maintain communications with enterprise crisis management, incident response, and state-specific response team members.
Coordinate with cyber response teams, the Chief Information Security Officer, legal, privacy, and the Protection Services Operations Center during cyber crises.
Develop and improve enterprise crisis management and cyber response plans, support incident and state-specific response plans, and ensure annual plan compliance requirements are met.
Assist in developing metrics and measurements for response program evolution, validation, and business awareness.
Implement processes, procedures, and systems to maintain continuity capabilities in compliance with laws, regulations, and best practices.
Assist in evaluating, designing, and deploying integrated systems and technology for response, intelligence, service delivery, and organizational strategy.
Maintain the roster of cyber crisis management and incident response team members.
Conduct annual training of crisis management and incident response plans as location teams change.
Maintain lessons learned and remediation tracking, and ensure response remediation items are resolved promptly.