Job Description

Role: Cyber Incident Response & Crisis Management Lead

Experience: 10+ Year

Location: Boston, Massachusetts

Primary Skills: Cybersecurity

Additional Skills: NIST 800-61, ISO 27035

Education: Bachelors

Years of Experience: 10+

Relocation: No

Additional Information:

Working hours: 40 hours

Remote/Hybrid/Onsite? Onsite

Position Description : Be a key leader driving resilience and rapid response. As the Cyber Incident Response and Crisis Management Lead for CLIENT, you will spearhead efforts to design, mature, and operationalize a modern, all-hazards incident response framework encompassing cybersecurity, IT service disruption, vendor compromise, and physical crises. You will ensure the client has the processes, plans, and playbooks needed to detect, respond to, recover from, and learn from disruptive events that threaten critical operations. This is a Full Time Employment opportunity and can be located in most of our US CSG offices, in a hybrid working model.



Your future duties and responsibilities Lead the definition and implementation of an integrated Incident Response and Crisis Management Framework across cybersecurity, IT infrastructure, and non-IT operational disruptions. Develop and standardize incident categorization, severity levels, escalation procedures, and notification workflows for all incident types. Facilitate the creation of detailed playbooks for different crisis scenarios, including cyberattacks, outages, vendor failures, and facility events. Lead the design and delivery of tabletop exercises and simulations to validate response capabilities and identify gaps. Establish metrics and KPIs to measure mean time to detect (MTTD), mean time to respond (MTTR), and incident containment effectiveness. Document all playbooks, escalation paths, stakeholder roles, and communication strategies for executive, operational, and external audiences. Integrate incident response processes with ServiceNow or other orchestration tools where applicable. Provide post-incident analysis, root cause investigations, and lessons learned documentation to drive continuous improvement





Required qualifications to be successful in this role 10+ years of cybersecurity or operational risk management experience, with 5+ years in incident response leadership. Deep understanding of incident management frameworks (NIST 800-61, ISO 27035) and crisis communication models. Hands-on experience developing playbooks, escalation trees, and stakeholder communication strategies for complex environments. Experience running tabletop exercises, after-action reviews, and continuous improvement initiatives. Familiarity with ServiceNow Incident Response Module (or similar platforms) a plus. Strong interpersonal and executive communication skills.


Education: Bachelor's Degree in Cybersecurity, Information Assurance, Business Continuity, or related field. Skills:

Cyber - 9 year(s)

ServiceNow Domains and Secure.

Health Insurance - 9 year(s

Job Tags

Similar Jobs