Senior Manager, Incident Response

Job Title:
Senior Manager, Incident Response

Location:
Hybrid Onsite 2x/Week in Downer's Grove, IL

The Senior Manager of Incident Response is the leader responsible for global incident detection and response capabilities. This role provides strategic direction and operational leadership for a globally distributed incident responsible team tasked with protecting our Corporation and its Operating Companies (OpCos)

Serving as the primary incident commander during significant security events, this leader ensures disciplined execution and clear executive decision support. The role combines deep technical expertise in digital forensics and incident response (DFIR) with executive presence, sound judgement, and composure under pressure.

A critical component of this position is maintaining alignment with US International Traffic in Arms Regulations (ITAR) and Cybersecurity Maturity Model Certification (CMMC) requirements, reinforcing our commitment to operational resilience, regulatory rigor, and risk-informed governance.

• ties
  
  Lead, mentor, and scale a 24/7 global response team, overseeing talent strategy, performance management, and professional development to deliver a high-performance culture grounded in technical excellence, accountability, continuous learning, and rapid disciplined execut
• ion.
  
  Serve as the primary incident commander for significant and enterprise-impacting security events. Direct and coordinate cross-functional response efforts across IT, Legal, HR, Communications, executive leadership, and external partners to ensure rapid containment, recovery, and resolut
• ion.
  
  Own and continuously improve incident response processes to ensure adherence to ITAR data sovereignty requirements and CMMC Level 1-3 requireme
• nts.
  
  Ensure accurate, defensible incident reporting, documentation, and audit readiness aligned with regulatory and legal expectati
• ons.
  
  Define and execute the long-term incident response strategy and roadmap, including the adoption of advanced Security Orchestration, Automation, & Response (SOAR) capabilities and Extended Detection & Response (XDR) framewo
• rks.
  
  Drive measurable improvements in Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR) through process optimization, tooling, and skills developm
• ent.
  
  Develop, maintain, and mature incident response plans, playbooks, and tabletop exercises to ensure organizational readiness across global business un
• its.
  
  Lead post-incident reviews and translate lessons learned into actionable improvements controls, processes, and response capabilit
• ies.
  
  Translate complex technical findings into clear, concise, risk-based reports for C-Suite during and following significant security eve
• nts.
  
  Serve as a trusted advisor to senior leadership on response readiness, cyber resilience, and incident risk post
• ure.
  
  Oversee proactive threat hunting initiatives and integrate tactical threat intelligence into the incident lifecy
• cle.
  
  Advance the organization from reactive response to predictive, data-driven defe

• ions
  10+ years of progressive experience in Cyber Security within a large-scale global enterprise.
  5+ years in a dedicated incident response leadership r
• ole.
  
  Professional certifications such as CISSP, GCIH, GCFA, or CISM are highly desira
• ble.
  
  Bachelor’s degree in computer science, Cyber Security, or a related field. A master’s degree is a p
• lus.
  
  Demonstrated experience managing security operations within ITAR-controlled environme
• nts.
  
  Strong working knowledge of CMMC frameworks, compliance, and response requireme
• nts.
  
  Proven track record of managing global teams across multiple time zones and cultu
• res.
  
  Experience managing third-party Managed Security Service Providers (MSSPs) prefer
• red.
  
  Demonstrated ability to lead decisively during high-pressure, high-visibility security eve
• nts.
  
  Ability to balance deep technical analysis with risk management and business priorit
• ies.
  
  Strong judgement in ambiguous environments and scenarios with incomplete informat
• ion.
  
  Exceptional written & verbal communication skills, including delivery of clear messaging during high-stress eve
• nts.
  
  Hands-on experience with EDR / XDR platforms, SIEM technologies, and forensic tools
• ets.
  
  Strong knowledge of MITRE ATT&CK framework and cloud security architect
• ure.
  
  Due to ITAR requirements, candidates must be a "U.S. Person" as defined by 22
  
  C.
• F.R.120.15 (U.S. Citizen, permanent resident, or protected individu