DIRECTOR OF INCIDENT RESPONSE - REMOTE

Compass Group•Charlotte, NC

13d•$180,000 - $200,000•Remote

About The Position

The Director of Incident Response leads the organization’s efforts in preparing for, detecting, responding to, and recovering from cybersecurity incidents. This leadership role requires strong strategic vision, operational excellence, and technical expertise. The Director will oversee the incident response team and ensure the organization is resilient against cyber threats.

Requirements

Bachelor’s degree (Computer Science, Information Security, or related field) OR equivalent experience (e.g. military service or additional security operations experience).
8+ years of experience in cybersecurity with at least 4 years in incident response-related activities
Proven leadership experience in cybersecurity roles
In-depth knowledge of security monitoring tools (SIEM, EDR, IDS/IPS).
Familiarity with malware analysis, forensics, and reverse engineering.
Strong understanding of AWS (Guarduty, networking, operating systems, and cloud infrastructure.
Excellent communication, decision-making, and crisis management skills.
Detail oriented mindset
Ability to work under pressure and lead in highly complex environments.
Proven experience briefing executive stakeholders.

Nice To Haves

CISSP, CISM, GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA), or similar.
Microsoft Entra Tenant, Google SecOps, and Crowdstrike experience preferred.

Responsibilities

Develop and implement an effective incident response strategy, ensuring alignment with business goals.
Collaborate with executive leadership to communicate incident response capabilities and status.
Maintain strong relationships with internal stakeholders, vendors, and regulatory agencies.
Stay current on industry developments to identify emerging security technologies, risks and trends to ensure our systems keep pace with security technology and risk landscape evolution
Utilize meaningful metrics to drive alerting strategy
Lead the response to major cybersecurity incidents, ensuring timely mitigation and recovery.
Establish and maintain incident response playbooks and escalation protocols.
Coordinate cross-functional teams (IT, legal, communications, etc.) during incidents.
Work closely with Cybersecurity teams to detect potential threats.
Identify areas of tuning and improvement with tools for detection, alerting, and incident tracking.
Conduct post-mortem analyses of incidents to identify root causes and preventive measures.
Deliver detailed incident reports and present findings to senior leadership.
Build and manage a high-performing incident response team.
Define career development paths and mentorship for team members.