Senior IT Incident Response Manager / Fractional CISO, Security Leadership

1X Technologies AS•San Carlos, CA

6d•$180,000 - $235,000•Onsite

About The Position

As the Senior IT Incident Response Manager / Fractional CISO, you will own 1X’s incident response program end-to-end and help establish the security operating rhythm across the business. You will design practical plans, lead real-world exercises, and command incidents when they occur. In a fractional CISO capacity, you will partner cross-functionally to align security priorities with business risk. This is a hands-on senior leadership role focused on readiness, clarity, and measurable improvement under pressure.

Requirements

10+ years of experience in security leadership, incident response, or security operations with direct program ownership
Proven experience leading real-world security incidents and facilitating tabletop exercises with executive and technical stakeholders
Strong judgment under pressure with excellent communication skills and calm, decisive leadership
Demonstrated ability to build and operationalize incident command structures that teams consistently follow
Experience driving measurable improvements in detection, response, documentation, and control maturity
Ability to operate effectively across IT, Security, and Engineering in a fast-growing environment
Experience aligning security programs with business priorities and risk management frameworks

Responsibilities

Own the incident response lifecycle: prepare, detect, respond, recover, and continuously improve
Design and run executive and technical tabletop exercises and live drills, driving follow-through on identified gaps
Create and maintain practical playbooks covering account compromise, ransomware, lost devices, insider risk, vendor breaches, and cloud exposure
Lead incidents in real time, establishing command structure, managing communications, maintaining decision logs, preserving evidence, and driving postmortems
Define escalation paths, on-call expectations, and coordination models with SOC/MDR partners, incident response firms, and cyber insurance providers
Partner with IT, Security, Legal, People Operations, Finance, and Engineering on crisis communications and business continuity
Establish clear roles, responsibilities, and communication norms so teams operate effectively during high-pressure events
Translate security risks into business decisions and prioritized action plans at the executive level