Crisis & Cyber Response Manager

Molina Healthcare•Long Beach, CA

About The Position

The Crisis & Cyber Response Manager executes and maintains Molina’s crisis and cyber incident management lifecycle. The role implements right-sized strategies and solutions for rapid operational response, and works with internal functions and external partners to develop, maintain, and improve incident and crisis plans, playbooks, strategies, policies, and procedures. The manager prioritizes program work and identifies resource needs to improve response times and coordination and communication during crises. The position facilitates walkthroughs, tabletop exercises, simulations, and full-scale exercises with internal and external stakeholders. It supports and manages responses to disruptive cyber events as needed, and provides day-to-day delivery of crisis management and cyber crisis response program activities, including guidance to enterprise leaders and employees. The role coordinates and leads responses to events affecting Molina’s people, property, systems, or facilities and contributes to special projects and risk mitigation programs that strengthen organizational resilience. The ideal candidate has significant experience leading moderate- to large-scale third-party cyber incidents from a crisis management perspective, as well as enterprise-wide responses to severe weather, natural disasters, civil unrest, and brand or reputation crises. The manager coordinates with cyber response teams, the CISO, legal, privacy, and the Protection Services Operations Center (PSOC); maintains response-team communications and rosters; develops and tests plans and continuity tools; and tracks after-action findings and remediation. Molina Healthcare offers a competitive benefits and compensation package.

Requirements

At least 7 years of operational experience across multiple cybersecurity disciplines and crisis management, including at least 3 years of corporate business experience in cyber response, incident response, crisis management, and/or disaster recovery, or an equivalent combination of relevant education and experience.
Experience conducting risk assessments, business process work, or control auditing.
Strong documentation skills, including detailed tracking, executive briefings, and reporting.
Practical understanding of technical and security concepts, including network architecture design, logical access controls, vulnerability management, encryption, and cloud computing.
Strong problem-solving and analytical skills, including evaluating information from multiple sources, reconciling conflicts, breaking high-level information into details, and applying sound business knowledge.
Strong organizational skills, self-starter attitude, ability to multitask and manage multiple projects, and attention to detail.
Ability to work collaboratively, build and maintain customer relationships, and work with geographically distributed teams.
Demonstrated focus on developing and implementing processes across organizational boundaries.
Data analysis experience and ability to create value-added metrics and reporting.
Hands-on experience in cyber incident response, disaster response, and crisis management.
Understanding of cyber response and recovery stages and the fundamentals of incident response planning, testing, and exercises.
Situational awareness and ability to respond to incidents that threaten the company, property, data, or people.
Experience with risk management and cyber response software or systems.
Familiarity with cyber threats and trends, including ransomware, malware, phishing, and insider threats.
Familiarity with ChatGPT and Copilot and using AI for research.
Familiarity with industry best practices and standards for cyber and crisis events.
Strong project management experience and skills.
Strong verbal and written communication skills, including presenting information to internal and external stakeholders.
Proficiency with Microsoft Office and applicable software programs.

Nice To Haves

Deep experience with cybersecurity and crisis management industry-standard tools and concepts.
Business Continuity Institute (BCI) and/or Disaster Recovery Institute International (DRII) certification.
Certified Information Systems Auditor (CISA) and/or Certified Information Systems Security Professional (CISSP).

Responsibilities

Drive commitment, support, ownership, accountability, and results for cyber response, incident response, and crisis management activities.
Support documentation of cyber response and incident management programs, including policies, procedures, frameworks, templates, and instructions that address regulatory requirements.
Document standard operating procedures, incident response playbooks, and escalation protocols.
Validate and test response strategies, identify gaps, and communicate results to leadership.
Review and provide input on enterprise response systems, tools, and services, including out-of-band options.
Conduct research and analysis in support of cyber and incident response programs and projects.
Develop and conduct employee incident response training.
Support enterprise threat and cyber crisis response, including incident notifications and updates, employee emergency notifications, threat monitoring and analysis, stakeholder notifications, cyber incident response team meeting coordination and minutes, state-specific incident response leadership, and support for impacted business operations.
Prepare detailed and timely response after-action and test reports; analyze trends across incidents and exercises and recommend improvements.
Periodically test continuity tools, including out-of-band notification and incident communication tools.
Establish and maintain communications with enterprise crisis management, incident response, and state-specific response team members.
Coordinate with cyber response teams, the CISO, legal, privacy, and PSOC during cyber crisis situations.
Develop and improve enterprise crisis management and cyber response plans, support incident and state-specific response plans, and ensure annual plan compliance requirements are met.
Assist in developing metrics and measurements to support program evolution, validation, and business awareness.
Implement processes, procedures, and systems to maintain compliance with applicable laws, regulations, and best practices for continuity capabilities.
Assist with evaluating, designing, and deploying integrated systems and technology supporting response, intelligence, service delivery, and organizational strategy.
Maintain the roster of cyber crisis management and incident response team members.
Conduct annual training of crisis management and incident response plans as location teams change.
Maintain lessons-learned and remediation trackers and ensure remediation items are resolved in a timely manner.
Assist with special projects and risk mitigation programs that strengthen organizational resilience.