Global Director, Cyber Defense & Incident Response

American Express Global Business Travel; Northern (KY); Hybrid; USD 130,000 - 242,000; Full time

Job summary

Amex GBT is seeking a Director, Cyber Defense to lead four teams—CSIRT, CTI, Detection Engineering, and DSI—in safeguarding travelers, colleagues, and data worldwide.

You will set strategy, budgets, and metrics, act as incident commander for major events, and partner with Legal, Privacy, HR, and executive leadership to protect sensitive information while driving security excellence across the business.

Qualifications

• 10+ years in cybersecurity, including leadership of incident response or security operations.
• Experience leading sensitive investigations involving data privacy, insider risk, or employee conduct, in partnership with Legal or HR.
• Familiarity with privacy regulations (GDPR, CCPA) and security frameworks such as MITRE ATT&CK.

Responsibilities

• Lead four teams (CSIRT, CTI, Detection Engineering, DSI) as a unified cyber defense function.
• Set strategy, roadmap, and budget; report progress and risk to senior leadership.
• Act as incident commander for major security incidents and coordinate technical response with executives.
• Develop and track metrics (dwell time, MTTD/MTTR, investigation closure, intelligence coverage).

Skills

Cybersecurity leadership

Incident response

Threat intelligence

Detection engineering

Policy & governance

Education

Bachelor's degree in related field

Tools

SIEM/EDR

Threat intel platforms

Job description

Amex GBT is seeking a Director, Cyber Defense to lead four teams—CSIRT, CTI, Detection Engineering, and DSI—in safeguarding travelers, colleagues, and data worldwide.

You will set strategy, budgets, and metrics, act as incident commander for major events, and partner with Legal, Privacy, HR, and executive leadership to protect sensitive information while driving security excellence across the business.