Cyber Incident Response Manager

Overview

At BBH, Partnership is our approach to business and relationships. We support professional and personal goals to help clients and advance our business. With a 200-year legacy, this is the right place to build a fulfilling career.

Background: The Business Continuity and Disaster Recovery (BD/DR) team is within the Protect Pillar in Systems. The Protect Pillar focuses on central accountability to protect against physical and logical security risks, safeguard stakeholder assets, and detect, prepare for, and respond to security events. The Pillar covers:

• Business Continuity and Disaster Recovery
• Cybersecurity
• Enterprise Data Protection and Data Governance
• Global Security
• Information Security Management (ISM)

Technology is integral to the Pillar’s control measures, and the Protect Pillar sits within BBH’s Systems organization.

Reporting to the Governance head within the Cybersecurity Team, we are seeking an experienced Cyber Incident Response Manager to lead and enhance our cyber incident response program.

Responsibilities include:

• Serve as the point of contact for cyber systems events to manage communications and coordination
• For cyber breaches by vendors, work with the Cyber team and act as the BBH contact with vendors to gather details on the breach, including root cause; apply lessons learned to the BBH cyber environment; document and report on the events
• For client cyber breaches, work with the Cyber team, Anti-Fraud and other stakeholders to gather, coordinate responses, and document and report on the events
• For internal cyber events, coordinate the cyber incident response process from detection to resolution, ensure timely action, and communicate with relevant stakeholders
• Enhance incident response documentation (tracking incidents, updating procedures, playbooks, etc.)
• Serve as the point of escalation for the cyber incident management team and foster collaboration and cross-training
• Participate in cyber-related tabletop exercises
• Conduct social engineering exercises to raise awareness of social engineering risks
• Stay abreast of latest cybersecurity threats and trends and proactively train relevant groups
• Respond to client due diligence requests and participate in client due diligence meetings

• Minimum 8+ years of experience in cyber security and incident management, preferably within financial services
• Strong understanding of cyber incident response frameworks (e.g., NIST, ISO), DFS Part 500 regulations, DORA, and industry practices
• Technical proficiency with IT systems, infrastructure and applications
• Ability to lead and foster collaboration
• Ability to prioritize effectively to meet deadlines and manage multiple incidents
• Excellent analytical and communication skills
• Strong PowerPoint and Excel skills

$150,000 - $180,000

BBH’s compensation program includes base salary, discretionary bonuses, and profit-sharing. The anticipated base salary range shown above is location-specific and may differ due to cost of living and other factors. Base salaries may vary based on skills, experience, and qualifications. BBH’s total rewards package includes benefits that support your well-being and professional development.

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, age, genetic information, creed, marital status, sexual orientation, gender identity, disability status, protected veteran status, or any other protected status under federal, state or local law.

Brown Brothers Harriman (BBH) is a premier global financial services firm known for premium service, specialist expertise, technology solutions, and a partnership approach to client management. We work with sophisticated clients across Investor Services and Capital Partners. We are committed to delivering exceptional service and expert advice while empowering our people to contribute ideas and grow with the firm.