Vice President – Cyber Incident Response will join the National Incident Response Team within the Information Security & Policy portfolio to protect critical systems supporting market operations, financial institution supervision, and internal Federal Reserve System functions. This leader will manage all aspects of the cyber incident response practice, including maturing 24x7 SOC and IR operations, threat hunting, malware analysis, and forensics. The role involves integrating AI tools, autonomous triage models, and innovative analytics to enhance detection and response capabilities. Key responsibilities include providing technical expertise during enterprise-level incidents, mentoring staff, and managing change management for technology modernization. The ideal candidate possesses expertise in cloud capabilities, security technology integration, and architecture. This position requires a leader capable of coordinating high-impact briefings on sensitive matters while ensuring the integrity of information systems against unauthorized use across a complex, federated IT organization.
Lead and mature 24x7 SOC and incident response operations including threat hunting, malware analysis, and forensics.
Integrate AI tools, autonomous triage models, and innovative analytics to improve detection and response speed.
Provide technical leadership and direction during enterprise-level cyber incidents or new threat conditions.
Develop strategies to optimize security services and enhance defense capabilities for critical operational areas.
Prepare high-impact written and verbal briefings on sensitive cybersecurity matters for senior executive leadership.
Manage change management initiatives to guide teams through technology modernization and process evolution.
Mentor staff and foster professional growth while building strategic relationships across the enterprise.
What we're looking for
Bachelor's degree in an applicable discipline or equivalent is required.
U.S. citizenship and ability to obtain and maintain a Top Secret security clearance are required.
5 to leadership experience in progressively responsible roles in a demanding enterprise environment is required.
Professional experience in an applicable discipline and demonstrated experience evaluating processes for a complex, federated IT organization is required.
Experience managing staff and demonstrating strong leadership skills is required.
Knowledge of modern detection and response operations, including SOC operations, cloud capabilities, and AI modernization is required.
Expertise in incident response, crisis leadership, and security technology integration is required.
Ability to provide high-impact written and verbal briefings on sensitive cybersecurity matters to senior executives is required.
Identity Governance
Privileged Access Management
Data Protection
Zero Trust
GRC
NIST CSF
ISO 27001
PCI DSS
HIPAA
SOX
Encryption
Data Loss Prevention
Cybersecurity
Risk Management
AI
Information Security