Information Security Global Incident Response Lead

Vontier•Greensboro, NC

9d•Hybrid

About The Position

As the Information Security Global Incident Response Lead, you will play a critical role in the organization's cybersecurity efforts. The position is responsible for acting as a lead during security incidents, coordinating efforts with various members of the Security Operations and Incident Response Team, ensuring Preparation, Identification, Containment, Eradication, Recovery, and Lessons Learned. This position will work closely with business owners, IT teams, Privacy/Legal, and other members of the Information Security Team to protect the confidentiality, integrity, and availability of the organization's data and systems.

Requirements

Bachelor's degree in Information Security, Information Technology, Computer Science, or a related field or equivalent work experience.
Proven experience (5 years) in cybersecurity (operations, vulnerability management, engineering, or related roles) with at least 2 years of experience participating in incident response actions/activities.
Advanced knowledge of security concepts and principles.
Experience coordinating global, cross-functional teams in high-pressure situations.
Excellent communication and stakeholder management skills.
Familiarity with common security tools such as SIEM, EDR, forensics, and incident management platforms.
Strong analytical and problem-solving skills.
Robust attention to detail.
Obtain relevant certifications such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), etc.

Nice To Haves

Continuing education and professional development are essential for career growth in this field.

Responsibilities

Lead the response to high-impact cybersecurity incidents.
Coordinate cross-functional teams globally to ensure timely containment, eradication, and recovery.
Act as a first-level decision-maker during incidents, escalating to Managers/Directors, coordinating with InfoSec Comms, and following established response protocols.
Develop, maintain, and continuously improve global incident response playbooks, runbooks, and workflows.
Participate in regular incident simulations and tabletop exercises to evaluate and enhance response readiness.
Analyze incident post-mortems to identify root causes and implement corrective actions.
Utilize AI tools to continuously improve incident response efforts.
Work closely with IT, Security Operations, Legal, Communications, and business units worldwide to ensure alignment during incidents.
Work with Security Awareness function to assist in improving user security awareness stemming from security incidents.
Act as a liaison between technical teams and senior leadership to provide clear incident updates and risk assessments.
Maintain incident documentation and reporting in accordance with regulatory and compliance requirements.
Track key incident metrics and produce reports to inform security strategy and executive leadership.