Orchestration of response and remediation of incident response for highest criticality security events

Take ownership and lead response to critical incidents within the company

Establish and mature documentation surrounding protocols and procedures governing the security incident command team

Prepare and deliver communications, including executive summaries and incident briefings, to key stakeholders during and after incident response

Conduct rapid response, mitigation, and investigations on the highest priority cases impacting ServiceNow and user data

Partner with the team members across multiple regions to drive response and investigations globally

Organization and facilitation of scenario-based exercises to test and improve incident management and response strategies

Maintenance of existing playbooks and procedures, as well as developing new ones, to further standardize SIC and its partners' responses when verifying MSIs

Contribute to the organization and completion of Post-Incident Reviews (PIRs) and Root Cause Analyses (RCAs) following major security incidents

Identify new ways to simplify, integrate, automate and refine the major security incident process to better support internal and external stakeholders