Director, Incident Response
$169.01k - $370.53kKPMG
The KPMG Advisory practice is at the forefront of transformation, offering excellent opportunities for individuals to advance their careers and expertise with KPMG. Looking ahead, we anticipate continued evolution and success within the practice, fostering both personal and professional development, thereby creating new pathways for growth. In this ever-changing market environment, our professionals must be adaptable and thrive in a collaborative, team-driven culture. At KPMG, our people are our number one priority. With a wealth of learning and career development opportunities, a world-class training facility, and leading market tools, we help our people continue to grow both professionally and personally. If you're looking for a firm with a strong team connection where you can be your whole self, have an impact, advance your skills, deepen your experiences, and have the flexibility and access to constantly find new areas of inspiration and expand your capabilities, then consider a career in Advisory.KPMG is currently seeking a Director, Incident Response to its Advisory Services Organization.Responsibilities:Lead enterprise cyber incident response engagements, overseeing containment, investigation, recovery, remediation, and post-incident resilience effortsAdvise executive leadership, boards, and key stakeholders during incidents, providing strategic guidance, crisis management, and cross-functional coordinationDirect incident investigations, root cause analysis, and remediation initiatives while advancing incident response methodologies, playbooks, and service offeringsOversee, mentor, and QC high-performing incident response teams, driving operational excellence, service delivery, performance metrics, and continuous improvementPartner across cybersecurity, risk, privacy, and forensics teams while supporting business growth through client relationship management, solution development, and trusted advisory leadershipAct with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment Qualifications:Minimum ten years of recent experience in incident response, threat management, digital forensics, security operations, or related cybersecurity disciplines; seven years leading incident response teams and large-scale response engagements; CISSP, GCIH, GCFA, GCFE, CISM, or similar certifications preferredBachelor's degree in business or related field from an accredited college/university is preferred; minimum of a high school diploma or GED required plus twelve years of relevant experience in incident responseStrong presence in the digital forensics and incident response market, including conference speaking experience and established relationships within the law firm and insurance sectors is highly preferredProven experience leading complex cyber incident investigations and response engagements using industry frameworks such as NIST and SANS, with expertise across digital forensics, SIEM, EDR/XDR platforms, automation tools, and Windows, Linux, macOS, cloud (Azure, AWS, GCP), networking, and IT/OT environmentsDemonstrated success building and maturing incident response and cyber resilience programs, coupled with strong executive presence, stakeholder management, and the ability to lead multiple high-priority engagements while supporting client relationships and business growthMust be willing to Travel as required.Applicant must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)KPMG LLP and its affiliates and subsidiaries (“KPMG”) complies with all local/state regulations regarding displaying salary ranges. If required, the ranges displayed below or via the URL below are specifically for those potential hires who will work in the location(s) listed. Any offered salary is determined based on relevant factors such as applicant's skills, job responsibilities, prior relevant experience, certain degrees and certifications and market considerations. In addition, KPMG LLP is proud to offer a comprehensive, competitive benefits package, with options designed to help you make the best decisions for yourself, your family, and your lifestyle. Available benefits are based on eligibility. Depending on job classification, standard work hours, and years of service, KPMG LLP provides a Total Rewards Package that includes 401(k) and medical and may include dental, vision, disability and life insurance, personal well-being and Personal Time Off. Additionally, each year KPMG publishes a calendar of holidays to be observed during the year depending on your job classification and entity affiliation. Additional details about our benefits can be found towards the bottom of our KPMG US Careers site at Benefits & How We Work.Follow this link to obtain salary ranges by city outside of CA: California Salary Range: $169005 - $370530 KPMG LLP and its affiliates and subsidiaries ("KPMG") is an equal opportunity employer. KPMG complies with all applicable federal, state, and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race/ethnicity, color, creed, religion, age, sex/gender, national origin, ancestry, citizenship status, marital status, sexual orientation, gender identity or expression, disability, pregnancy, childbirth or other related condition, military/veteran status, genetic information, status as a victim of domestic violence or sexual abuse or any other legally protected status. The attached link contains further information regarding the firm's compliance with federal, state, and local recruitment and hiring laws. KPMG recruits on a rolling basis. Candidates are considered as they apply, until the opportunity is filled. Candidates are encouraged to apply expeditiously to any role(s) for which they are qualified that is also of interest to them. Los Angeles County applicants: Material job duties for this position are listed above. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness, and safeguard business operations and company reputation. Pursuant to the California Fair Chance Act, Los Angeles County Fair Chance Ordinance for Employers, Fair Chance Initiative for Hiring Ordinance, and San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
- ...knowledge of alternative platforms is also helpful. The Senior Director role is responsible for simultaneously managing multiple client matters as... ...requires significant and proven experience with Cyber Incident Response (“CIR”), although all types of document review are...SuggestedFull timeWork at office
$154k - $205k
Datadog Incident Response is an end-to-end incident operations solution native to Datadog’s unified observability and security platform. It brings the entire incident lifecycle — from alert to resolution — together in one place so engineers can respond fast with confidence...SuggestedWork at office- ...Harvey, Inc. in San Francisco is seeking an experienced Incident Response Handler to lead incident response for security events across cloud infrastructure, identity systems, corporate environments, and our AI platforms. You will mentor engineers, develop playbooks, and...Suggested
$225.25k - $265k
...Product Manager to lead the strategy and evolution of NodeZero Rapid Response. This role requires a strong blend of product leadership,... ...directly with CISOs, vulnerability management teams, SOC teams, incident responders, security researchers, prospects, and partners to...SuggestedRemote jobFull timeWork at officeImmediate startFlexible hours$114.1k - $268.18k
...new areas of inspiration and expand your capabilities, then consider a career in Advisory.KPMG is currently seeking a Manager, Incident Response to its Advisory Services Practice.Responsibilities:Lead planning, and execution of Cyber Incident response and Recovery....SuggestedH1bLocal areaImmediate start$70.3k
## Associate Director, Event and Venue Operations - Wharton San FranciscoApply: Hybrid... ...site execution.**Job Description****Job Responsibilities*** Event Strategy Planning and Execution... ...to WSF leadership. + Use results, incident reviews, and stakeholder feedback to improve...Permanent employmentFull timeTemporary workLocal areaWork from homeFlexible hoursWeekend workAfternoon shiftWeekday work$280k - $385k
...workflows, making security fundamental to everything we build. We’re looking for a Director of Detection and Response to build and lead the team that identifies threats, responds decisively to incidents, and turns what we learn into stronger defenses. You will own Harvey’s...Remote jobFull time- ..., research, risk, and enablement team focused on advancing AI responsibly across the enterprise. We help shape the enterprise vision for... ...company, and build the core platform that powers AI at scale. The Director of Responsible AI will lead the vision, development,...
$2,800 - $3,200 per month
Our partner is looking for a Director of People Operations & Global Talent based in Brazil... ...the transition of US HR compliance responsibilities from an external provider, strengthen employment... ...of maintaining zero compliance incidents. Manage multi-state US payroll, FLSA employee...Full timeFor contractorsLocal areaRemote workHome office- ...answers before your team even has to ask. The result: faster responses, happier customers, and a system that continuously improves itself... ...Linear, Cognition (makers of Devin), Modal Labs, and Incident.io run their support and customer success workflows on Pylon....Work at office
$141k - $195k
...are highly available and human & technical systems that are resilient. That’s where you come in. You will be a member of our Incident Response team to help Chime improve our readiness, response and drive organizational change from incidents.As an Incident Operations Manager...Full timeWork at officeLocal areaRemote workNight shiftWeekend work$35 - $40 per hour
Surefox North America Inc is looking for an experienced Incident Commander to support site supervisors and area managers in a security... ...operations setting in San Francisco. This role involves emergency response, threat monitoring, and risk assessments to ensure safety...Hourly payShift work- ...On-Call Executive Protection Officers to support a key client account on the Duress Response Team (DRT). You will monitor crowds, report threats, and respond decisively during incidents in San Francisco and surrounding sites. The role emphasizes vigilance, discretion, and...
- ...Executive Protection Level Event Security Officers to join the Duress Response Team in San Francisco. You will monitor crowds, identify threats, report quickly, and respond decisively to incidents to keep attendees and staff safe. You will coordinate with venue staff,...Shift work
$92k - $100k
...realize their full potential as productive, responsible, and caring citizens. We impact the... ...of Clubhouse Services, the Clubhouse Director is in charge of the Mission Clubhouse,... ...during community violence or escalated incidents. Execute the annual 360‑degree evaluation...Full timeLocal areaRelocationFlexible hours$93k - $107k
...Clubhouse Director Since 1891, Boys & Girls Clubs of San Francisco (BGCSF) has provided... ...their full potential as productive, responsible, and caring citizens. We impact the lives... ...violence in the community and/or an escalated incident at the Club. Lead the planning and...Full timeSummer workLocal areaRelocationFlexible hours- ...capacity rollouts, hardware and fabric quality issues, and major incidents. You'll be the person our providers answer to on delivery... ...provider-side failure, you\'re the incident commander: you run the response across our SREs, the provider\'s engineers, and the customer...Full timeContract workRemote work
- ...agreements (SLAs).Act as an escalation point for critical delivery incidents and coordinate cross-functional resolution efforts.Travel:... ...to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation...Live inWork at officeLocal area
$55 - $60 per hour
...Protection Level Event Security Officers to serve on the Duress Response Team (DRT) supporting a key client account. The DRT provides... ...them through the proper channels, and respond decisively when incidents occur. You will work closely with Surefox Leadership, venue staff...Hourly payImmediate startAll shiftsShift workNight shift$290k - $365k
...build beneficial AI systems. About the Role The Detection & Response (D&R) team plays a critical role in protecting our systems,... ...for an experienced Technical Program Manager to own and evolve incident management within D&R. This is a senior-level specialization on...Work at officeLocal areaImmediate startVisa sponsorshipFlexible hoursShift work$163k - $204k
...workshop. This cadence is a floor, not a ceiling. ~ Lead post-incident pattern ownership and technical triage. You are not the 24/7... ...including TAM‑specific CSAT (target 4.5/5+), escalation responsiveness against the 4‑hour SLA (target 95%+), and influence on Professional...Casual workWork at officeWorldwide3 days per week- ...without yours. Ready to write your story?Join MoFo as ASSOCIATE DIRECTOR, SECURITY OPERATIONSon our Information Technology team!This... ...and technical authority across security operations, incident response, threat detection engineering, threat intelligence, and digital...Work at officeLocal area
- ...About The Role Technical Account Managers at Ambient.ai are responsible for helping some of the world’s largest enterprises successfully... ...security industry and are passionate about preventing every security incident possible We partner with an incredible customer roster of...Full timeLocal areaFlexible hours
$80k - $110k
...leadership and support operations functions, this role is highly cross-functional and vital to Springboard’s core values. Core Responsibilities Talent Lifecycle Ownership Design strategy for onboarding, training, and readiness processes for mentors and live...Full timeWork experience placementRemote workFlexible hours$160k - $190k
...hiring leaders, Digital Innovation, and IT to build practical AI capabilities and turn prototypes into adopted, supported workflows. Responsible deployment: Establish testing, monitoring, access controls, data protection, accessibility, and fairness safeguards, preserving...- ...flight benefits can take you.Job Summary:The Duty Manager is responsible for ensuring the daily airport operation runs in a safe, efficient... ...operational standards.Immediately report safety and security incidents as well as potential hazards in line with the Unifi Fair and...Daily paidFull timeWork experience placementImmediate startShift workNight shift
- ...processing costs, refunds, chargebacks, and customer outcomes.Lead the response when billing breaks. Coordinate diagnosis, mitigation, and... ..., monitoring, and follow-through that prevent recurring incidents.Influence beyond your immediate team. Align senior stakeholders...Contract workWork at officeLocal areaImmediate start2 days per week
$70k - $75k
The Associate Director, HR Operations will play a pivotal role in strengthening the people, financial, and internal communication systems... ...and escalate compliance or operational risks. Additional Responsibilities: Participate in meetings, travel, and occasional evening or...Remote workFlexible hoursAfternoon shift$203.8k - $326.1k
...value. We are looking for an experienced Director to lead the VSP Payment Orchestration... ...practices, and ensure AI tools are embedded responsibly in day-to-day work with appropriate... ...testing, risk acceptance, launch decisions, incident learning, and post-launch performance...Full timeWork experience placementWork at officeLocal areaFlexible hours- ...business objectives with evolving cybersecurity threats. Key Responsibilities Lead and continuously improve the organization's... ..., and risk management programs. Oversee threat detection, incident response, vulnerability management, and security architecture...
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Director, Incident Response. Be the first to apply!
- director of automation San Francisco, CA
- lifestyle director San Francisco, CA
- director of radiology San Francisco, CA
- senior director San Francisco, CA
- director of physical therapy San Francisco, CA
- director of crm San Francisco, CA
- director of practice management San Francisco, CA
- director of government relations San Francisco, CA
- director of revenue integrity San Francisco, CA
- integration director San Francisco, CA





