below marketmost similar roles pay hereabove market
This role pays less than
72%
of similar roles. Most pay
$151,356–$201,662
— the blue band above.
At the midpoint, this role pays about
$154k
versus about
$177k
for comparable roles.
Based on 240 similar postings.
Employer
About Genworth Financial
Genworth Financial is a financial services company focused on mortgage insurance, long-term care insurance, and life insurance and annuity products to help people protect their financial well-being. Industry: Insurance & Financial Services
Genworth Financial currently has
23 open roles
on FindRole.
Listed pay typically runs
$120,900–$187,000
across 23 roles with salary data.
Lead, Security Operations will lead the Computer Security Incident Response Team at Genworth | CareScout, coordinating enterprise-wide cybersecurity incident response efforts. The role involves directing the full incident lifecycle, including triage, investigation, containment, eradication, and recovery. Key responsibilities include developing team capabilities, maintaining playbooks, leading tabletop exercises, and translating technical findings into business impacts for leadership. The position requires expertise in endpoint, network, identity, and cloud environments, utilizing SIEM, EDR, and security orchestration and automation tools. Candidates must possess skills in digital forensics, threat intelligence, and evidence handling. This role operates within a regulated environment, requiring close partnership with Legal, Privacy, and Risk teams to manage incident-related requirements and strengthen operational resilience against evolving threats through AI and automation.
Lead the Computer Security Incident Response Team (CSIRT) by setting priorities and developing team capabilities.
Direct cybersecurity incident response from initial triage through containment, eradication, recovery, and post-incident review.
Coordinate incident response efforts across technology, business teams, and external partners to ensure clear ownership and escalation.
Maintain and enhance incident response plans, playbooks, severity criteria, and escalation procedures.
Serve as the primary escalation point for significant incidents, translating technical findings into business impacts for leadership.
Partner with Legal, Privacy, Compliance, and Risk teams to support incident decisions and notification assessments.
Lead tabletop exercises and response simulations to test readiness and address security gaps.
Leverage AI and automation to identify and respond to cybersecurity threats at machine speed.
What we're looking for
Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or 7+ years of equivalent relevant experience.
Significant progressive experience in cybersecurity operations and incident response, including leadership of a CSIRT or comparable response function.
Demonstrated experience directing complex cybersecurity incidents and coordinating response across technical teams, business stakeholders, and external partners.
Strong technical knowledge of incident investigation, containment, eradication, and recovery across endpoint, network, identity, and cloud environments.
Experience with security monitoring and investigation technologies, including SIEM, EDR, and security orchestration and automation tools.
Working knowledge of digital forensics, evidence handling, threat intelligence, and attacker tactics, techniques, and procedures.