Key ResponsibilitiesIncident Response & ManagementLead and coordinate the full lifecycle of cybersecurity incidents - from identification to containment, eradication, recovery, and lessons learned.Develop, maintain, and continuously improve incident response plans, playbooks, and runbooks.Collaborate with internal teams, external vendors, and law enforcement (when required) to manage incident investigations and forensic analysis.Perform root cause analysis and track incident trends to mitigate future risks.Cyber Threat IntelligenceIntegrate internal and external threat intelligence into incident response activities and detection use cases.Monitor threat feeds and intelligence platforms to identify emerging threats and assess relevance to the organization's environment.Produce actionable intelligence reports and briefings for technical teams and executive stakeholders.Security Awareness & EducationOwn and deliver the enterprise-wide cybersecurity awareness program.Evaluate program effectiveness through metrics and feedback, and adapt content based on evolving threat trends and user behaviorRequirementsBachelor's degree in Cybersecurity, Computer Science, or related field. Certifications such as CISSP, GCIH, GCFA, CEH, or CTIA are highly valued.7+ years of cybersecurity experience with at least 3 years in a lead role managing incident response and threat intelligence functions.Deep understanding of incident response frameworks (e.g., NIST, SANS), MITRE ATT&CK, and threat hunting methodologies.Practical experience with SIEM, EDR, SOAR, and threat intelligence platforms (e.g., MISP, Recorded Future, Anomali).Demonstrated experience running cyber drills and tabletop exercises across technical and non-technical teams.Strong communication and stakeholder management skills, with the ability to translate technical issues into business language.Experience working in regulated industries (financial services, healthcare, etc.) is an advantage.Pam LimMorgan MckinleyEA Licence No: 11C5502 | EAP Registration No: R1106192
