Cybersecurity Incident Response Recovery Lead

Job Title: Cybersecurity Incident Response Recovery Lead
Job Type: Contract/Remote

Role Overview:
Responsible for supporting cross-functional teams during the restoration and remediation of customer-impacting cybersecurity incidents, as well as incident communications and the development of customer-facing executive summaries. The IR Recovery Lead will assist with threat analysis, containment, and the recovery of mission-critical systems and applications to restore the customer to normal business operations as soon as possible.

Responsibilities:

• Provide overall engagement leadership and be the primary point of contact in customer cybersecurity incidents, ensuring timely and accurate communications with stakeholders.
• Gather business requirements to facilitate an effective recovery of business operations.
• Provide support and guidance for customers experiencing security breaches.
• Serve as the primary interface with customer crisis management teams, offering guidance on appropriate incident response strategies and maintaining situational awareness while communicating details as needed.
• Coordinate and communicate with the customer's PMO on tasks, status, issues, and escalations.
• Leverage the power and scale to assist customers with full recovery by aligning products and services with customer requirements.
• Provide key insights during post-incident reviews to identify improvement opportunities.

Qualifications:

• 12+ years of experience in cybersecurity.
• Strong technical and consulting skills, as well as project management capabilities.
• A deep understanding of incident response best practices.
• Ability to demonstrate an understanding of data protection strategies and technologies.
• Experience with security and risk frameworks, standards, and best practices.
• Ability to develop more complex security incident recovery standards and procedures applicable to complex, global technical requirements.
• Experience in creating disaster recovery and incident recovery plans.
• An advanced understanding of cybersecurity incident recovery key concepts, with deep expertise in at least two areas.
• Experience with assessing the current state of the environment and the customer's needs in similar roles.
• Technical certification such as GCIH, CCFP, GCFE, GCFA, or equivalent is a plus.
• Prior experience in an incident response role.
• Understanding of IDS/IPS, SIEM, email security, EDR, and endpoint protection technologies.
• Strong understanding of network, application layer, and OS fundamentals.
• Strong attention to detail, time management, and analytical skills.
• Strong written and communication skills.
• Ability to function effectively in high-intensity situations while interacting with C-Suite executives from the customer.
• A degree in Computer Science, Engineering, or a related discipline is preferred.
• Up to 50% travel across EMEA.
  
  If you are interested in this role or would like to discuss it further, please call Nidhi at +353 1 645 5244 or email [email protected].
  
  Candidates must possess a valid visa to work in Ireland (Stamp 1G/Stamp 4/EU Passport).