--

What will your typical day look like?

As an Incident Readiness Manager, you will lead the strategic development and execution of cyber incident preparedness initiatives for our clients. You will be responsible for designing, facilitating, and overseeing a variety of tabletop exercises (executive, board-level, and technical), developing and maintaining incident response plans and playbooks, and ensuring robust incident response documentation and assessment processes. This role is critical in equipping organizations with the knowledge, tools, and confidence to effectively manage and respond to cyber threats. Your key responsibilities will include:

Tabletop Exercise Development and Leadership:

• Design, facilitate, and evaluate incident response tabletop exercises tailored to executive leadership, board members, and technical teams.
• Develop customized scenarios reflecting current threat landscapes and organizational risk profiles.
• Deliver actionable feedback and after-action reports to drive continuous improvement.

Incident Response Planning and Documentation:

• Lead the development, review, and enhancement of incident response plans, playbooks, and related documentation, ensuring alignment with industry standards (e.g., NIST, SANS).
• Collaborate with clients to ensure IR documentation reflects organizational structure, technology, and regulatory requirements.

Incident Response Assessments:

• Conduct comprehensive IR capability assessments to identify gaps and recommend improvements in processes, technologies, and team readiness.
• Benchmark client readiness against industry best practices and regulatory requirements.

Stakeholder Engagement and Training:

• Engage with executive and board-level stakeholders to communicate IR strategies, readiness posture, and areas for improvement.
• Provide training and awareness sessions to technical and non-technical audiences on IR roles, responsibilities, and procedures.

Continuous Improvement and Best Practices:

• Monitor emerging threats, regulatory changes, and best practices to ensure IR plans and exercises remain current and effective.
• Drive innovation in readiness methodologies, tools, and approaches.

Collaboration and Leadership:

• Supervise and mentor team members engaged in readiness activities.
• Foster a collaborative, high-performance team environment focused on client success and operational excellence.

About the team

Deloitte’s globally recognized Cyber Security practice advises organizations across industries on managing threats, reducing vulnerabilities, mitigating cyber risks, and elevating security programs. Our diverse team collaborates across the full spectrum of cyber services, including security and compliance assessments, technical assessments, governance, control testing, incident response, awareness training, and threat and vulnerability management.

Enough about us, let’s talk about you

You are someone who has:

Leadership & Communication:

• Proven experience leading and mentoring teams in high-pressure, dynamic environments.
• Strong ability to communicate complex technical concepts to both technical and non-technical stakeholders, including executive leadership.
• Demonstrated client management and relationship-building skills.
• Excellent time management and organizational abilities.
• Ability to remain composed and provide direction during crises.

Experience:

• At least 6 years of experience in digital forensics and incident response, or a closely related field, with at least 2 years in a leadership or managerial role.
• Significant hands-on experience in delivering tabletop exercises, performing incident readiness assessments, and developing incident response related documentation.
• Previous consulting firm experience is a strong asset.
• Broad experience in cybersecurity and technology fields.

Technical Skills:

• Understanding of incident response engagements (e.g., ransomware, data breaches, business email compromise, network intrusions, cloud incidents).
• Strong knowledge of incident response lifecycle
• Strong knowledge of incident response frameworks (NIST, SANS, ISO 27035, etc.).
• Deep understanding of NIST SP 800-61, SANS Incident Handler’s Handbook, ISO 27035, and other industry-standard IR frameworks.
• Familiarity with business continuity, disaster recovery, and crisis management.
• Ability to incorporate threat intelligence and real-world attack scenarios into readiness exercises and planning.

Total Rewards

The salary range for this position is $90,000 - $175,000, and individuals may be eligible to participate in our bonus program. Deloitte is fair and competitive when it comes to the salaries of our people. We regularly benchmark across a variety of positions, industries, sectors, targets, and levels. Our approach is grounded on recognizing people's unique strengths and contributions and rewarding the value that they deliver.

Our Total Rewards Package extends well beyond traditional compensation and benefit programs and is designed to recognize employee contributions, encourage personal wellness, and support firm growth. Along with a competitive base salary and variable pay opportunities, we offer a wide array of initiatives that differentiate us as a people-first organization. On top of our regular paid vacation days, some examples include: $4,000 per year for mental health support benefits, a $1,300 flexible benefit spending account, firm-wide closures known as "Deloitte Days", dedicated days of for learning (known as Development and Innovation Days), flexible work arrangements and a hybrid work structure.