Incident Manager

Lendistry; Tustin (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

Lendistry in Los Angeles, CA is seeking an Incident Manager to lead the organization’s security and operational incident response function, aligning with the GRC program to keep the company audit-ready.

You will own incident command from detection through resolution, directing cross-functional response with Security, Engineering, IT, Legal, Compliance, Communications, Facilities, HR, and Executive Leadership, and translate incidents into measurable improvements through KPIs and after-action

Qualifications

• Experience leading security incident response and governance programs.
• Ability to coordinate across Security, IT, Legal, Compliance, and Facilities.
• Strong decision making and communication under pressure.

Responsibilities

• Lead security and operational incident response and incident command.
• Develop and maintain Incident Action Plans (IAPs) with clear ownership and timelines.
• Make time-sensitive decisions weighing safety, regulatory exposure and business continuity.
• Lead post-incident reviews and drive corrective actions to closure.
• Run tabletop exercises and simulations to test playbooks and team readiness.

Skills

Incident management

Crisis leadership

Cross-functional collaboration

Decision making under pressure

Job description

Lendistry is an Equal Opportunity/Affirmative Action Employer. We consider applicants without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, or membership in any other group protected by federal, state, or local law.

If you need assistance or accommodation due to a disability, you may contact us at [e-mail]

Lendistry does not accept unsolicited resumes from recruiters, employment agencies, or staffing firms. To conduct business with Lendistry, a Master Services Agreement (MSA) must be executed and confirmed prior to submitting any information relating to a potential candidate. Without a signed MSA, Lendistry shall not be responsible to any individual or entity for any payment relating to any form of fee or compensation.

And, in the event that a resume or candidate is submitted by a recruiter, employment agency, or a staffing firm without a fully executed MSA, Lendistry has the unrestricted right to pursue and hire any of those candidate(s) without any legal or financial responsibility to the recruiter, agency, and/or firm.

This position is based onsite at our Los Angeles, CA location. Candidates must be able to work in-office as part of the role’s regular schedule.

A Day in the Life

The Incident Manager leads the organization’s security and operational incident response function while supporting the GRC program that keeps the company audit-ready. This role owns incident command from detection through resolution, directs cross-functional response across Security, Engineering, IT, Legal, Compliance, Communications, Facilities, HR, and Executive Leadership, and translates each incident into measurable improvement through KPIs, after‑action documentation, and updated controls. The role also supports ongoing compliance obligations (SOC 2, GLBA Safeguards Rule, ISO/IEC 27001) so that incident response and compliance posture reinforce each other rather than operating as separate functions.

Lendistry: Who We Are

We're proud to be the nation's largest minority-led, tech-savvy lender for small businesses and commercial real estate. As a certified Community Development Financial Institution (CDFI) and Community Development Entity (CDE), our mission is all about creating economic opportunities and fueling growth for small business owners and their communities. Join us as we pave the way with innovative financing and financial education!

What You’ll Be Doing

Incident Command & Crisis Leadership

• Serve as Incident Manager for security and operational incidents, holding full command and control over response activities.
• Build, execute, and maintain Incident Action Plans (IAPs) that give each response a clear structure, owner, and timeline.
• Make time‑sensitive decisions under pressure, weighing safety, regulatory exposure, and business continuity.
• Lead post‑incident reviews and drive corrective actions through to closure.
• Run tabletop exercises and simulations to pressure‑test playbooks and team readiness.

Physical Security Operations

• Manage physical security incidents, including unauthorized access, safety threats, and facility disruptions.
• Coordinate with Facilities, HR, Legal, and local authorities as needed during physical security events.
• Ensure physical security controls align with cybersecurity, business continuity, and compliance programs.

Cross-Functional Collaboration

• Act as the central point of coordination between technical responders and non‑technical stakeholders during an incident.
• Direct and coordinate Security Operations, Engineering, IT, Legal, Compliance, Communications, and Executive Leadership throughout the incident lifecycle.
• Engage external parties - law enforcement, emergency services, regulators, and vendors - when an incident requires it.
• Partner with Security, Engineering, and Compliance to keep response playbooks and escalation paths current.

Compliance Management