Cybersecurity Crisis Program Manager
Coordinates strategic response and communication frameworks during significant cybersecurity incidents.
Overview
This role focuses on the structural and procedural aspects of security emergencies rather than the underlying code or network forensics. The day-to-day rhythm oscillates between proactive planning, where the manager designs response playbooks and conducts simulation exercises, and high-pressure incident management. During an active crisis, the manager serves as the central point of contact, ensuring that information flows accurately between technical responders and the board of directors while managing third-party vendors and external communications.
Success in this career depends on the ability to remain calm and analytical when faced with ambiguous data and time-sensitive threats. The environment is characterized by intense periods of activity that require rapid decision-making and diplomatic navigation of corporate hierarchies. Those who thrive in this position generally possess a blend of project management discipline and a comprehensive understanding of the cybersecurity threat landscape, allowing them to translate complex technical risks into business-critical priorities.
Responsibilities
- Develop and maintain the organization's cybersecurity incident response plan and associated playbooks.
- Lead cross-functional war room sessions to coordinate actions between legal, PR, IT, and executive teams.
- Conduct post-incident reviews to identify process gaps and track the implementation of remedial actions.