CFC Senior Enterprise Security Incident Manager

Experian; Oregon; Hybrid; USD 153,000 - 276,000; Full time

Benefits offered by this job

Bonus plan

Medical, dental, vision

Flexible work environment (remote/hyrb

Paid time off

Job summary

Experian is seeking a Senior Enterprise Security Incident Manager to serve as Cyber Incident Commander, leading cross-functional responses to major cybersecurity incidents and coordinating the full lifecycle from detection to post-incident analysis.

The role requires after-hours availability and on-call rotation, with opportunities to strengthen the incident response program and support Cyber Fusion Center operations across hybrid/remote environments.

Qualifications

• 8+ years of experience in security operations or IT, with 5+ years in incident handling/response.
• Experience leading investigations and response to complex cybersecurity incidents (APTs, ransomware, DDoS, etc.).
• Knowledge of incident response, digital investigations, TTPs, and containment/remediation processes.
• Broad technical knowledge of enterprise and cloud environments and detection/response platforms.

Responsibilities

• Lead enterprise-wide response to high-risk cybersecurity incidents as Cyber Incident Commander, directing cross-functional teams and driving containment and recovery.
• Provide executive incident leadership with updates to senior leaders and stakeholders; coordinate technical and business teams and document incidents.
• Enhance the incident response program through post-incident reviews, root cause analysis, and improved playbooks and processes.
• Strengthen cyber readiness by leading tabletop exercises and validating response capabilities with business and technology stakeholders.
• Support Cyber Fusion Center operations by monitoring threats, collaborating across teams, and contributing to security plans.

Skills

Security operations

Incident handling

Investigations

Incident response

Cloud environments

Leadership

Cybersecurity certifications

Education

Bachelor's degree in Computer Science/Engineering/Information Security

Job description

Company Description

Experian is a global data and technology company, powering opportunities for people and businesses around the world. We operate across a range of markets, from financial services to healthcare, automotive, agribusiness, insurance, and many more. Experian invests in people and new advanced technologies to unlock the power of data. We have an amazing team of 25,200 people in 32 countries.

Job Description

As a member of Experian's Global Security Office (EGSO), the Senior Enterprise Security Incident Manager (ESIM) serves as the Cyber Incident Commander for significant cybersecurity incidents, leading cross-functional response efforts across the enterpriseThis hands-on technical role coordinates the full incident response lifecycle, from detection and containment through recovery and post-incident analysis, while providing executive-level communications, driving operational decision-making, and ensuring alignment with Experian's Global Information Security Incident Response Plan.

Must be available to respond to after-hours pages for potentially major security incidents and manage the CFC incident response during assigned nights, weekends, and holidays as part of an on-call rotation.

You’ll have the opportunity to:

• Lead enterprise-wide response to high-risk cybersecurity incidents as Cyber Incident Commander, validating and escalating incidents, directing cross-functional response efforts, and driving containment, eradication, recovery, and resolution.
• Provide executive incident leadership by delivering updates to senior leaders and stakeholders, coordinating technical and business teams, supporting decision-making, and maintaining accurate incident documentation.
• Enhance the incident response program through post-incident reviews, root cause analysis, lessons learned, and continuous improvements to response plans, playbooks, and operational processes.
• Strengthen cyber readiness by leading tabletop exercises, partnering with business and technology stakeholders to validate response capabilities, identify gaps, and improve preparedness.
• Support Cyber Fusion Center operations by maintaining awareness of emerging threats, collaborating across security and technology teams, participating in the on-call rotation, and contributing to plans that strengthen Experian's security posture.

Qualifications

Your background:

• 8+ years of experience in security operations or information technology, with 5+ years in information security incident handling or response.
• Bachelor's degree in Computer Science, Computer Engineering, Information Security, or a related field, or equivalent professional experience.
• Experience leading/supporting investigations and response to complex cybersecurity incidents, including APTs, ransomware, DDoS, insider threats, web/mobile application attacks, and data exfiltration.
• Knowledge of cyber incident response, digital investigation methodologies, and adversary tactics, techniques, and procedures (TTPs), including incident triage, impact assessment, containment, remediation, and recovery.
• Broad technical knowledge of enterprise and cloud environments, including operating systems, networking, security controls, enterprise technologies, and detection and response platforms.
• Experience investigating complex incidents, performing root cause analysis, making risk-based decisions, and communicating technical findings to all audiences.
• Leadership experience coordinating cross-functional incident response activities, influencing stakeholders, and managing multiple high-priority cybersecurity incidents.
• Demonstrated initiative, including the ability to identify improvement opportunities, drive security enhancements, and operate effectively while keeping leadership informed.

Plus:

• Industry certifications in cybersecurity, incident response, digital forensics, or ethical hacking preferred (e.g., GIAC, CISSP, SSCP, CISM, EC-Council, Offensive Security).

Additional Information

Our uniqueness is that we celebrate yours. Experian's people first, inclusive and purpose driven culture is multi award-winning; World's Best Workplaces™ 2025 (Fortune Global Top 25), Great Place To Work™ in 26 countries to name a few. Check out Experian Life on social or explore our Careers Site to understand why.

Our compensation reflects the cost of labor across several U.S. geographic markets. The base pay range for this position is listed above. Within this range, individual pay is determined by work location and additional factors such as job-related skills, experience, and education. You will be also eligible for a variable pay opportunity.

Experian is proud to be an Equal Opportunity Employer for all groups protected under applicable federal, state and local law, including protected veterans and individuals with disabilities. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.

Benefits/Perks:

• Great compensation package and bonus plan.
• Core benefits including medical, dental, vision, and matching 401K.
• Flexible work environment, ability to work remote, hybrid or in-office.
• Flexible time off including volunteer time off, vacation, sick and 12-paid holidays.

Explore all our exciting benefits here: .

Recruitment Fraud Awareness

Recruitment communications will only be sent from an @experian.com email address.Experian will never ask candidates to make any payment as part of an application, interview, assessment, onboarding, or recruitment process.

#LI-RemoteThis is a remote position.Employee Status: RegularRole Type: HomeJob Posting - Salary Range: $153,075 - $275,535Department: Information SecuritySchedule: Full Time Compensation: USD 153075 - USD 275535 - yearly