Director Resource Planning & Capacity

Cypfer•North Dallas, TX
•Hybrid

About The Position

The Director, Resource Planning & Capacity owns capacity planning, scheduling, utilization, and skills coverage across Digital Forensics & Incident Response (DFIR), Post-Breach Remediation (PBR), Offensive Security (OffSec), and Cyber Threat Intelligence (CTI). The role ensures the right experts are assigned to engagements at the right time and at a sustainable pace, and translates workforce data into actionable hiring, cross-training, and staffing decisions. The director builds rolling 30/90/180-day capacity forecasts by practice, region, role level, and skill; models demand surges; and prepares headcount and investment cases. They lead staffing from engagement intake through release, create fair on-call and surge rotations, and coordinate planned work with urgent incident response needs. They also set utilization targets, report utilization and realization, maintain accurate time and resource data in the PSA platform, and resolve issues such as under-billing, inaccurate estimates, and overloaded employees. The position maintains the skills inventory and taxonomy, closes skills gaps through hiring, certification plans, and cross-training, and partners with practice leaders on career paths. It monitors workload, on-call demands, and burnout signals, and works with HR and Talent Acquisition on hiring, onboarding, and retention. The director oversees workforce management tools and integrations with PSA, CRM, and HR systems, publishes a single source of truth for workforce data, and presents monthly to the executive team. The role covers a billable consulting workforce across multiple regions and time zones. It is based in a hybrid, on-site location in Dallas, Texas, and reports to the FVP of Program Management. After-hours and weekend support for urgent staffing needs during critical incidents is expected.

Requirements

  • 10+ years of experience in resource management, workforce planning, or delivery operations.
  • 5+ years leading a function.
  • Hands-on experience managing utilization, capacity, and staffing for a billable workforce of 150+ people.
  • Availability for expected after-hours and weekend support for urgent staffing needs during critical incidents.
  • Strong working knowledge of PSA or resource management tools and their links to CRM and HR systems.
  • Advanced data skills, including Excel modeling and a BI tool such as Power BI or Tableau.
  • Working understanding of cybersecurity services and delivery across incident response, recovery, offensive testing, and threat intelligence.
  • Clear, direct communication with practice leaders, executives, and committees.
  • Expert capacity planning and forecasting skills.
  • Expert resource scheduling and deployment skills.
  • Advanced workforce analytics and reporting skills.
  • Advanced PSA and resource tooling skills.
  • Intermediate cybersecurity services delivery knowledge.

Nice To Haves

  • Experience in professional services or consulting.
  • Experience with Scoro.
  • Experience in workforce management in a 24/7 or surge-driven environment, such as incident response, MSSP/MDR, or emergency services.
  • Experience staffing across multiple countries and time zones.
  • Experience building skills inventories while protecting employee privacy, including GDPR considerations.
  • Experience running an on-call program and reducing burnout.
  • CompTIA Security+ or similar certification.
  • Intermediate project and portfolio management skills.

Responsibilities

  • Build and run rolling 30/90/180-day capacity forecasts by practice, region, role level, and skill using pipeline, incident trends, and channel partner volumes.
  • Model surge scenarios for reactive practices and maintain visibility into bench strength.
  • Prepare headcount requests and supporting utilization and revenue cases for the resource and investment committee.
  • Lead staffing from engagement intake to release, coordinating with the PMO and practice leads to staff incidents within hours.
  • Design and run fair on-call and surge rotations for DFIR and PBR, while scheduling planned OffSec and CTI work.
  • Shape delivery team structures, including standing pods pairing DFIR investigators with PBR engineers.
  • Set utilization targets by level and report utilization and realization weekly to practice and executive leadership.
  • Maintain the integrity of time and resource data in the PSA platform, including timekeeping discipline and estimate-versus-actual accuracy.
  • Identify and address under-billed engagements, inconsistent estimates, and overloaded individuals with the responsible owners.
  • Maintain the skills inventory and taxonomy, including certifications, tooling, and languages, with care for employee privacy.
  • Close skill gaps through hiring, certification plans, and cross-training.
  • Partner with practice leaders on career paths so staffing decisions also support employee development.
  • Monitor workload, on-call load, and burnout signals and act to reduce attrition risk.
  • Partner with HR and Talent Acquisition on hiring plans, onboarding ramp, and retention risks in high-demand roles.
  • Direct workforce management tooling and integrations with PSA, CRM, and HR systems.
  • Publish a single source of truth for headcount, capacity, and utilization, and present it monthly to the executive team.
© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service