Incident Response Manager

This is a fully remote position, open to applicants in Illinois.

📋 Description

• Act as the primary coordinator for security and data incidents from the moment of detection through to resolution and closure.

• Collaborate with investigators, forensics, IT, DLP, Legal, HR, and business stakeholders to ensure incidents progress efficiently.

• Manage responses to breaches, DLP events, privacy incidents, fraud and identity issues, unauthorized access, workforce activity concerns, and data exposure incidents.

• Assist with incident triage and severity evaluation.

• Serve as a liaison for Legal, HR, Global Security, IT, and business stakeholders.

• Create status updates and executive-level briefings for leadership.

• Facilitate cross-functional communication during ongoing incidents.

• Provide off-hours incident support as necessary.

• Oversee the incident tracking system and drive action items, remediation efforts, and follow-ups to completion.

• Maintain and enhance incident response playbooks, processes, and procedures.

• Generate incident metrics and executive-level reports.

• Assist with post-incident reviews and lessons-learned discussions.

• Work in conjunction with DLP, GRC, and BCP functions.

• Support incident response scenarios during business continuity and ransomware tabletop exercises.

• Help ensure adherence to regulatory, privacy, and compliance requirements.

• Identify and address gaps in incident response coordination, escalation channels, and stakeholder communication.

⛳️ Requirements

• A minimum of 5 years of experience in incident response, security operations, GRC, or a similar security coordination role.

• Proven experience in coordinating investigations or incidents that involve multiple stakeholders and teams.

• An undergraduate degree is required, preferably in Information Security, Information Technology, Information Systems, or a related field.

• Familiarity with incident response frameworks and best practices.

• Knowledge of DLP, identity and access management, privacy, and fraud security domains.

• Exceptional written and verbal communication skills.

• Strong organizational abilities and capacity to manage concurrent action items across various incidents.

• Capability to maintain composure and effectiveness under pressure.

• Willingness to support incidents outside of standard business hours.

• Security certifications such as GCIH, GCFA, CISM, CISSP, or equivalent are preferred.

• Experience with case management or incident tracking tools like ServiceNow, Jira, or ADO is preferred.

• Familiarity with DLP, identity and access management, and privacy or fraud investigation techniques is preferred.

• Experience in generating metrics and reports for senior leadership audiences is preferred.

• Strong analytical problem-solving abilities are preferred.

• Experience working across different time zones and with distributed, cross-functional teams is preferred.

🏝️ Benefits

• Medical coverage

• Dental coverage

• Vision coverage

• Wellness programs

• Eligibility to participate in Huron’s annual incentive compensation program