Senior Cybersecurity Incident Coordinator

Description

This senior role sits within the company's cybersecurity incident response team and leads end-to-end coordination of complex, high-impact security incidents across the whole company.

You will set clear ownership, accountability and pace through each incident. You turn technical findings into business risk decisions, keep the response aligned with the company's Incident Response Plan, and keep leadership informed on status, business impact, containment, root cause and residual risk.

You will work largely on your own judgment, especially in ambiguous, time-sensitive and cross-functional incidents. You will also raise the team's maturity through process work, governance, coaching and better use of metrics and reporting.

You will act as a recognized subject-matter leader for incident coordination and response.

Responsibilities

• Lead complex incidents from initial triage through containment, eradication, recovery and post-incident review.
• Be the main coordination point between Security Operations, incident handlers, application security, vulnerability management, infrastructure teams, business partners and leadership.
• Apply approved containment methods to affected hosts, applications, identities and other technology assets, weighing business continuity, operational risk and recovery needs.
• Direct the gathering, checking and recording of victim, asset, application and business impact information to support risk-based decisions.
• Keep incident status, action tracking, decision logs, stakeholder updates and escalation records accurate throughout the response.
• Explain actions, emerging risks, technical findings, root cause, recovery considerations and residual risk to both technical and non-technical audiences, including senior leaders.
• Find dependencies and blockers, assign clear ownership, and push response actions forward across several teams.
• Make sure response work follows approved policies, standards, playbooks, service levels and governance requirements.
• Track, analyse and report Security Operations incident metrics, including response performance, containment progress, trends, recurring control gaps and improvement areas.
• Lead or facilitate post-incident reviews to find systemic weaknesses, capture lessons learned, define corrective actions and strengthen resilience.
• Work with security and technology leaders to improve incident processes, playbooks, automation, documentation and operational readiness.
• Coach and mentor incident coordinators and other team members to build consistent decision-making, communication and response practices.
• Represent incident response in cross-functional work, including risk discussions, control assessments, exercises and improvement initiatives.
• Write and deliver executive communications on incidents, business impact and response actions.
• Build, improve and maintain incident response tools to streamline operations and increase effectiveness.
• Give leaders concise, actionable reporting that supports enterprise risk decisions and priorities, and develop incident metrics for executive leadership.

Requirements

• Strong analytical and critical-thinking skills, with the ability to work from incomplete or conflicting data, set priorities and defend your conclusions.
• Proven experience coordinating complex cybersecurity incidents or other high-impact technology events across technical and business stakeholders.
• Advanced written and verbal communication, including briefing senior leaders and translating technical risk into business implications.
• Sound judgment and timely decisions under pressure in ambiguous, fast-changing situations.
• Strong customer service and relationship skills, with a record of building trust across technical teams, business partners and leaders.
• Ability to work effectively in a highly collaborative, globally distributed team.
• Experience coaching, mentoring or developing team members and helping build a culture of operational excellence.
• Ability to juggle multiple priorities, keep close attention to detail and drive accountability through the full incident lifecycle.
• Commitment to continuous improvement, process discipline and effective cybersecurity governance.
• Strong project management skills.

Conditions

This role is hybrid and requires reporting to a specific location at least 3 days a week, or at a frequency set by your manager.

You will support an on-call rotation during off hours and holidays.

The company does not provide immigration sponsorship for this role. Do not apply if you will need company immigration sponsorship now or in the future, including company sponsorship, the company as employer of record on a government form, or any work authorization that requires a written submission or other immigration support from the company, such as H1-B, OPT, STEM OPT, CPT, TN or J-1.

Relocation benefits are available to candidates who qualify under company policy.

You may be required to complete a role-related assessment and or a pre-employment screening before you start.

The company is an equal opportunity employer committed to a workplace free of unlawful discrimination.

Benefits

• Support for your well-being at work and at home from day one, with access to the company's Total Rewards resources.