Lead and manage the Security Operations and Incident Response team, ensuring effective monitoring, investigation, and resolution of security alerts and incidents. Actively participate in high-priority incident response efforts, guiding containment, eradication, and recovery activities. Develop and implement processes for root cause analysis and corrective actions to prevent recurrence of incidents. Design and drive improvements in detection and response workflows, including automation, runbooks, and SOPs. Identify and strengthen cybersecurity tooling and visibility to enhance threat detection and prevention capabilities. Integrate threat intelligence into operational processes and ensure the team is equipped to respond to emerging threats. Collaborate with IT, Security Architecture, and Business teams to align response strategies and improve organizational resilience. Oversee the development of incident and metric reporting to improve visibility, accountability, and executive communication. Foster a culture of continuous improvement by mentoring team members and developing their technical and analytical skillsets. Lead readiness activities such as tabletop exercises, playbook reviews, and cross-functional coordination to ensure preparedness.