Head of DFIR Operations

MORGAN MCKINLEY PTE. LTD.; Singapore; On-site; SGD 150,000 - 200,000; Full time

Job summary

A leading cybersecurity firm in Singapore is seeking a Director of DFIR Operations to lead the team and enhance forensic capabilities. Candidates must have over 15 years of experience in digital forensics and a strong capacity to manage teams and budgets. Relevant certifications and a degree in Cybersecurity are desirable. This role entails strategic planning and significant involvement in incident response activities.

Qualifications

• Minimum 15 years of experience in Digital Forensics and Incident Response operations.
• Proven leadership and people management experience.
• Deep technical expertise in DFIR tools.

Responsibilities

• Lead and manage the DFIR operations team.
• Develop strategic plans to enhance DFIR capabilities.
• Oversee incident response activities.

Skills

Leadership in DFIR

Strategic planning

Technical expertise in DFIR tools

Communication skills

Education

Bachelor’s degree in Cybersecurity or related field

Advanced degree

Tools

DFIR tools and methodologies

Job description

Key Responsibilities:

• Lead and manage the DFIR operations team, fostering a high-performance culture and professional development.
• Develop and execute strategic plans to enhance DFIR capabilities and align with organizational goals.
• Oversee incident response activities, ensuring timely and effective investigation, containment, and remediation of security incidents.
• Establish and maintain DFIR policies, procedures, and best practices.
• Collaborate with executive leadership, IT, security, and other stakeholders to integrate DFIR operations into broader cybersecurity initiatives.
• Manage resource allocation, budgeting, and vendor relationships related to DFIR tools and services.
• Drive continuous improvement through lessons learned, threat intelligence integration, and emerging technology adoption.
• Represent the organization in external forums, audits, and regulatory engagements related to incident response and forensics.
• Ensure compliance with relevant legal, regulatory, and industry standards.

Qualifications:

• Minimum 15 years of experience in Digital Forensics and Incident Response operations.
• Proven leadership and people management experience, with the ability to inspire and develop teams.
• Strong strategic planning and execution skills.
• Deep technical expertise in DFIR tools, methodologies, and frameworks.
• Excellent communication, collaboration, and stakeholder management abilities.
• Experience managing budgets, vendor relationships, and operational metrics.
• Relevant certifications such as GCFA, GCIH, CISSP, or equivalent are highly desirable.
• Bachelor’s degree in Cybersecurity, Information Technology, or a related field; advanced degree is a plus.