Director, Incident Response

Kroll•United States,

13d•$200,000 - $250,000•Remote

About The Position

Kroll is seeking a Director to join its Cyber & Data Resilience Practice. The role supports a wide variety of clients in managing incident response engagements, while working alongside senior staff, developing DFIR expertise, mentoring team members, and delivering excellent client service. Kroll’s security teams respond to more than 2,000 incidents per year and support the full incident lifecycle, including litigation demands. The Director provides technical support for cyber defense and incident response assignments and manages cases from project structuring through closure. This includes coordinating resources, presenting findings, advising clients, monitoring quality and value, maintaining client relationships, supporting staff development, and achieving performance indicators. The position requires managing complex cases, budgets, concurrent projects, and competing demands across varied industries and country locations.

Requirements

Expertise in incident response.
Expertise in computer forensics.
Expertise in network security.
Expertise in computer security audit.
Excellent project management skills and the ability to communicate effectively and build strong working relationships with clients and colleagues across Kroll’s offices.
Six years of incident response experience investigating and remediating cyber breaches is recommended, preferably in a consultancy position.
Fluency in English and fluency or native capability in the language of the country where the candidate will be based.
Extensive experience managing complex cases, resources, and budgets.
Clarity of thought and expression to build confidence with stakeholders and colleagues.
A highly professional and commercial approach to problem solving.
Interest in global events and markets, with awareness of working across different cultural and political environments.
Excellent written and verbal communication skills that help represent diverse communities.
Experience working with diverse teams.

Nice To Haves

CREST IR, CFCE, ENCE, GIAC, or other certifications; GCFA, GCIH, GREM, and GNFA are listed as examples.
Knowledge of an additional language.

Responsibilities

Provide strong technical skills in support of cyber defense or incident response assignments.
Act as Case Manager and run assignments through closure, contributing to project structure, resource management, presentation of findings, and commercially viable client advice.
Monitor the quality of personal and assignment-team work and ensure value is delivered to clients.
Communicate regularly with senior team members and raise case issues and findings for resolution and decision-making.
Develop and maintain key client relationships while upholding Kroll’s service and integrity standards.
Mentor staff and support their development while ensuring Kroll’s standards are met.
Consistently achieve key performance indicators, including utilization rates, business generation, and personal objectives.
Identify learning needs and opportunities and continuously improve personal performance.
Coordinate concurrent projects and tasks while managing competing demands.