Head of Cyber Incident Response & Cyber Threat Mitigation Services (New York)
Overview Head of Cyber Incident Response & Cyber Threat Mitigation Services – full-time assignment with a premier Insurance client. Hybrid schedule: 3 days in office, with up to 20% travel to other offices as needed. Locations include Holmdel, NJ; Bethlehem, PA; New York, NY; or Stamford, CT. Base pay range: $200,000.00/yr - $220,000.00/yr. This range is provided by Software Guidance & Assistance, Inc. (SGA, Inc.). Your actual pay will be based on your skills and experience — talk with your recruiter to learn more. Responsibilities Lead a team of incident response and threat mitigation engineers. Design, operate, and continuously improve the cyber incident response and threat mitigation program. Oversee the Corporate Incident Response Team, coordinating cross-functional actions during incidents. Own and maintain playbooks, quick-reference guides, and out-of-band communication protocols. Collaborate with 1st line teams to ensure containment readiness and clear shutdown authority. Integrate incident response with business continuity and disaster recovery efforts. Triage and lead escalated incidents from the SOC. Manage third-party IR retainers and coordinate periodic response exercises. Ensure high-quality incident handling, tracking, reporting, and post-incident analysis. Develop and document incident reports and response metrics. Lead the User Behavior Analytics (UBA) program and enhance SOC procedures based on threat trends. Identify and close gaps in logging and monitoring capabilities. Facilitate cross-functional incident response collaboration with HR, Legal, Compliance, and other stakeholders. Deliver clear, concise communication to stakeholders across all levels. Provide deep technical insight into security control monitoring at all layers. Champion cyber risk mitigation initiatives and advocate for continuous improvement. Contribute to cybersecurity strategy, vendor management, and talent development. Support the enterprise Data Loss Prevention (DLP) program. Recruit, develop, and manage team performance, growth, and retention. Advise leadership on improving incident response and threat mitigation tools and practices. Respond to audit and due diligence requests. Continuously refine IR and threat mitigation processes. Required Skills 7 years of broad, hands-on technology experience, including public cloud environments 3 years of leadership experience in cybersecurity, with a focus on incident response Deep knowledge of incident response methodologies, evidence handling, and threat mitigation Strong familiarity with MITRE ATT&CK, NIST CSF, and industry best practices Proficiency in SIEM tools (preferably Splunk), UBA, and logging/monitoring strategies Understanding of malware analysis, common vulnerabilities, and threat actor tactics Experience in regulated environments (e.g., financial services, insurance), including US privacy laws Proven ability to lead, develop, and inspire high-performing, cross-functional teams Strong written and verbal communication skills; ability to engage with stakeholders across IT, Legal, HR, Risk, and Compliance Demonstrated ability to translate threat intelligence into actionable response and risk mitigation strategies Strategic thinker with strong analytical skills and business alignment mindset Bachelor's or Master's degree in Cybersecurity or related field; relevant certifications a plus (e.g., CISSP, GIAC) Committed to continuous learning and staying current on evolving threats and tools Preferred Skills Insurance or equivalent Experience in a large consulting organization, Big 4, or equivalent SGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission is to solve big IT problems with a more personal, boutique approach. We match consultants to engagements and value diversity, customer service, employee development, and integrity. Learn more at https://sgainc.com/. SGA is an Equal Opportunity Employer and does not discriminate on the basis of Race, Color, Sex, Sexual Orientation, Gender Identity, Religion, National Origin, Disability, Veteran Status, Age, Marital Status, Pregnancy, Genetic Information, or Other Legally Protected Status. We provide access, equal opportunity, and reasonable accommodations for individuals with disabilities. Please visit our company EEO page to request an accommodation or assistance regarding our policy. Seniority level Mid-Senior level Employment type Full-time Job function Other Industries IT Services and IT Consulting J-18808-Ljbffr
