Global DFIR Executive: Lead Incident Response & Forensics

AstraZeneca GmbH; Gaithersburg (MD); On-site; USD 191,000 - 286,000; Full time

Job summary

AstraZeneca is seeking a Senior Director, Digital Forensics & Incident Response to own the global cyber-incident capability across cloud, on-premises and OT/ICS environments. You’ll build the function, hire the team and set the standards, reporting to senior IT leadership and coordinating with regional CSIRTs.

Lead incident governance, forensic defensibility, readiness exercises and 24x7 coverage, while partnering with Legal, Privacy and Compliance to manage regulatory obligations and risk

Qualifications

• Bachelor’s degree in information security, computer science or related field.
• Ten+ years in cybersecurity with 7+ years in IR or digital forensics.
• 5+ years leading incident response in a large enterprise.
• Experience coordinating across hybrid cloud, on-prem, and OT/ICS.
• Ability to communicate complex risks to executives.

Responsibilities

• Act as the accountable commander for material and crisis-level cyber incidents.
• Own the Incident Response strategy, roadmap, and budget.
• Define incident categories, severity, and activation criteria.
• Ensure forensic defensibility and chain-of-custody.
• Run tabletop and functional exercises; report to leadership.

Skills

Incident Command & IR

Digital Forensics

Cloud & OT/ICS

Leadership of large teams

Regulatory awareness

Education

Bachelor’s degree in information security, CS or related

Tools

SIEM

SOAR

XDR

Job description

AstraZeneca is seeking a Senior Director, Digital Forensics & Incident Response to own the global cyber-incident capability across cloud, on-premises and OT/ICS environments. You’ll build the function, hire the team and set the standards, reporting to senior IT leadership and coordinating with regional CSIRTs.

Lead incident governance, forensic defensibility, readiness exercises and 24x7 coverage, while partnering with Legal, Privacy and Compliance to manage regulatory obligations and risk