Global Director, DFIR & Incident Response

AstraZeneca; Gaithersburg (MD); On-site; USD 191,000 - 286,000; Full time

Job summary

AstraZeneca is seeking a Senior Director for Digital Forensics & Incident Response to build and lead a global DFIR capability across cloud, on-premises and OT/ICS environments. You will own incident governance, readiness, and the evidentiary standards that enable executive reporting and regulatory compliance.

Responsibilities include defining the incident response strategy, staffing the function, and coordinating with Legal, Privacy, IT, and Risk; you will drive 24x7 coverage, tabletop

Qualifications

• Bachelor’s degree in information security, computer science or related field, or equivalent practical experience.
• 10+ years in cybersecurity with 7+ years in incident response or digital forensics.
• 5+ years leading incident response in a large enterprise and 2+ years managing other leaders.
• Experience coordinating 24x7 global DFIR with follow-the-sun handoffs.
• Ability to brief executives and collaborate with Legal, Privacy, Risk and Compliance.

Responsibilities

• Act as accountable commander for material and crisis-level cyber incidents across hybrid cloud, on-premises and OT/ICS.
• Own the Incident Response strategy, multi-year roadmap and budget with high autonomy.
• Define incident categories, severities, activation criteria and escalation authorities.
• Ensure evidence preservation with chain-of-custody and liaison with Legal regarding litigation holds.
• Run tabletop, functional and purple-team exercises and drive post-incident improvements.

Skills

Incident Response Leadership

Digital Forensics

Cybersecurity Program Management

Executive Communication

Threat Exposure & Incident Prevention

Education

Bachelor’s degree in information security or related field

Tools

SIEM

SOAR

XDR

LLM-assisted runbooks

Job description

AstraZeneca is seeking a Senior Director for Digital Forensics & Incident Response to build and lead a global DFIR capability across cloud, on-premises and OT/ICS environments. You will own incident governance, readiness, and the evidentiary standards that enable executive reporting and regulatory compliance.

Responsibilities include defining the incident response strategy, staffing the function, and coordinating with Legal, Privacy, IT, and Risk; you will drive 24x7 coverage, tabletop