Incident Response Coordinator

Global Payments; Corpus Christi (TX); On-site; USD 80,000 - 120,000; Full time

Job summary

Global Payments is seeking a skilled Incident Manager to coordinate containment and post‑incident activities within the GCIM team. You will work with GSOC, perform root cause analysis, and document actions to prevent recurrence.

You will communicate with executives and stakeholders during incidents and align remediation with risk management processes. Ideal candidates have 2+ years in incident management or incident response, strong cross‑functional communication skills, and knowledge of SIEM

Qualifications

• Bachelor's degree in Computer Science, Info Security, or related field, or relevant work experience.
• Typically minimum 2 years of experience in Incident Management or Incident Response.
• Knowledge of network operations or engineering or system administration on Unix, Linux, Mac, or Windows.
• Strong verbal and written communication skills.
• Ability to facilitate meetings and drive resolutions.

Responsibilities

• Coordinate incident response in line with the security incident response plan.
• Chair Post Incident Reviews and document Root Cause Analyses.
• Provide 24x7 on-call incident management support on rotation.
• Stay up to date with new and emerging threats affecting information assets.
• Provide executive level written communication related to incidents.
• Coordinate remediation with Bug Bounty findings and risk management.

Skills

Incident management

Security operations

Communication skills

Education

Bachelor's degree in Computer Science/Info Security

Tools

SIEM

Google Workspace

JIRA

Job description

Every day, Global Payments makes it possible for millions of people to move money between buyers and sellers using our payments solutions for credit, debit, prepaid and merchant services. Our worldwide team helps over 3 million companies, more than 1,300 financial institutions and over 600 million cardholders grow with confidence and achieve amazing results. We are driven by our passion for success and we are proud to deliver best‑in‑class payment technology and software solutions. Join our dynamic team and make your mark on the payments technology landscape of tomorrow.

As part of the Global Cybersecurity Incident Management (GCIM) team you will coordinate containment, eradication and post‑incident activities for critical cyber security incidents. You will play a key role in the Incident Response Team (IRT) overseeing, validating and documenting containment acting as a point of escalation for our Global Security Operations Center (GSOC). Following security incident containment & recovery you will be responsible for engaging with key stakeholders for any Root Cause Analysis (RCA) and post‑incident activity, ensuring we have reduced the chances of incident recurrence and assessed the efficiency of our incident response techniques and procedures.

What you’ll own

• Coordinate incident response in line with the corporate security incident response plan.
• Manage post‑incident activity to include scheduling and chairing Post Incident Reviews (PIR), the documentation of Root Cause Analysis and the tracking of actions to prevent incident recurrence.
• Provides 24x7 on‑call incident management support on rotation for critical security incidents.
• Stays up to date with new and emerging threats that can affect the organization's information assets, third party software/solutions, IT configuration changes, and network/system.
• Provides executive level written communication during incident response for inquiries related to security incidents or assigned cases.
• Coordinate the remediation of findings from the organization’s Bug Bounty Program working directly with whitehat researchers.
• Works closely with Risk Management teams to document identified risks and issues highlighted through post‑incident or root cause analysis activities.
• Maintains a working knowledge of key data security frameworks and regulations such as PCI (Payment Card Industry)/Logical Security guidelines and models, HIPPA (Health Insurance Portability and Accountability Act), (GDPR) General Data Protection Regulation, PII (Personally Identifiable Information), NIST CSF (Cyber Security Framework).
• Collaborates with Legal and Privacy Offices throughout the company on critical data protection/security incidents.
• Participates in reviews and assessments to provide recommendations to enhance or improve the security posture of environments as part of post incident activities and lessons learned.
• Maintain and follow runbooks for day‑to‑day incident response activities in line with the corporate security incident response plan.

What you’ll bring

• Relevant Experience or Degree in: Bachelor's degree in Computer Science, Info Security, or related field. Or relevant work experience in a related field.
• Typically Minimum 2 Years Relevant Experience with Incident Management or Incident Response Knowledge of network operations or engineering or system administration on Unix, Linux, MAC (Message Authentication Code), or Windows; common security operations, intrusion detection systems, Security Incident Event Management systems, Penetration Testing, Web Application assessment, Secure Coding practices, Cloud Technologies.
• Strong verbal and written communication skills.
• Demonstrated ability to effectively communicate ideas and persuade others to accomplish challenging goals and objectives.
• Ability to facilitate meetings and enable discussions that lead to resolution and communicate results.

Skills / Knowledge

Developing professional expertise, applies company policies and procedures to resolve a variety of issues.

Job Complexity

Works on problems of moderate scope where analysis of situations or data requires a review of a variety of factors. Exercises judgement within defined procedures and practices to determine appropriate action. Builds productive internal/external working relationships.

Supervision

Normally receives general instructions on routine work, detailed instructions on new projects or assignments.

Industry Knowledge

Continued self‑education of new and emerging threats and relevant processes, controls, or technologies to mitigate them.

Incident Response - Knowledge and skills to contribute to all phases of Incident Response. It’s a bonus if you have ITIL V4 Professional security certifications such as CompTIA Security+/ Cybersecurity Analyst+, or Systems Security Certified Practitioner (SSCP), or CISM(Certified Information Security Manager), or CISA(Certified-Information-Systems-Auditor), or GSEC (GIAC Security Essentials), or GCIH (GIAC Certified Incident Handler) Knowledge of industry standard security compliance programs PCI (Payment Card Industry), GDPR (General Data Protection Regulation), NIST Cyber Security Framework etc.) Cloud Knowledge or certifications such as Google Cloud Fundamental or AWS Foundations Experience working in Google Workspace and JIRA.

About the team

Our inclusive and global teams win together every day. We’re proud to have the best minds in the industry, who you can learn from as you grow your career. The people, the energy, the connections – it’s unmatched. Come and be part of an ever‑evolving company and get dynamic opportunities that go beyond borders.

What makes a Globalpayer?

Globalpayers think like a client, act like an owner and win as one team. We’re curious and innovative – always finding better ways to deliver impact. We empower each other to make decisions, and it’s our passion that drives excellence in everything we set out to do.

If you wish to request reasonable accommodations related to applying for employment or provide feedback about the accessibility of this website, please contact [e-mail].

Applicant must be authorized to work in the U.S. without the need for employment‑based visa sponsorship now or in the future; We will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H‑1B, L‑1, TN, O‑1, E‑3, H‑1B1, F‑1, J‑1, OPT, CPT or any other employment‑based visa).

Global Payments and Worldpay recently joined forces, and we’re currently operating across two Workday application systems. If you don’t see one of your applications here, it may have been submitted in the Worldpay Workday system instead.

Global Payments (NYSE : GPN), we empower simple, fast, secure payments for everyone. And to do that, we’ve built a complete, worldwide commerce ecosystem that delivers software and services at scale to millions of companies around the world—from ambitious startups to global enterprises. Our team of 27,000 experts is dedicated to your success. Headquartered in Atlanta, Georgia, we're a Fortune 500® company and a member of the S&P 500 with worldwide reach spanning North America, Europe, Asia Pacific and Latin America. Wherever you are—or wherever you want to be—we’re there, ready to support you.

For more information, visit company.globalpayments.com and follow Global Payments on X, LinkedIn and Facebook.

Accommodations: Accessibility Requests: If you wish to request reasonable accommodations related to applying for employment or provide feedback about the accessibility of this website, please contact [e-mail] EEOC Statement: Global Payments Inc. is an equal opportunity employer. Global Payments provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex (including pregnancy), national origin, ancestry, age, marital status, sexual orientation, gender identity or expression, disability, veteran status, genetic information or any other basis protected by law. Those applicants requiring reasonable accommodation to the application and/or interview process should notify [e-mail].

Global Payments is an organization that stands against racism, intolerance and injustice in all its forms — one that respects, honors and celebrates the diversity of our team members and the differences among us. Our commitment to fostering a company culture that values and respects Inclusion and Diversity is steadfast. Standing together as one company, we will continue to work to drive positive change for the communities in which we live and work and stamp out injustice.

Global Payments is an equal opportunity employer. Global Payments provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex (including pregnancy), national origin, ancestry, age, marital status, sexual orientation, gender identity or expression, disability, veteran status, genetic information or any other basis protected by law. Those applicants requiring reasonable accommodation to the application and/or interview process should notify a representative of the Human Resources Department.

SB Global Payments Inc. is an equal opportunity employer. Global Payments provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex (including pregnancy), national origin, ancestry, age, marital status, sexual orientation, gender identity or expression, disability, veteran status, genetic information or any other basis protected by law.