Senior Cyber Incident Coordination Lead

Refinitiv; Eagan (MN); Hybrid; USD 118,000 - 220,000; Full time

Benefits offered by this job

Hybrid work model

Mental health days

Employee benefits

Job summary

Thomson Reuters is seeking a Lead, Cyber Incident Coordination within the Information Security Risk Management team to mature and coordinate enterprise incident response. This role emphasizes process and coordination over hands-on forensics, serving as a key point of contact during major security events.

You will support the Director and VP, drive timely responses, maintain incident records, and ensure remediation actions are completed post-incident, while collaborating with stakeholders across

Qualifications

• Bachelor's degree or equivalent relevant experience.
• 3+ years of experience supporting or leading processes, programs, or operations within IT/InfoSec or risk management.
• Experience coordinating major incident management activities and communicating with senior leaders.

Responsibilities

• Coordinate cyber incident management across full lifecycle from activation to closure.
• Facilitate incident bridges, calls, and working sessions; track decisions and owners.
• Document actions, deadlines, and outcomes; manage executive communications and reports.
• Lead post-incident reviews and drive corrective actions with owners.
• Track long-term remediation with risk management and technical teams.
• Design and facilitate executive tabletop exercises annually.

Skills

Stakeholder coordination

Incident coordination

Executive communications

Documentation & record-keeping

Microsoft 365 proficiency

Education

Bachelor's degree or equivalent

Bachelor's degree in Information Technology / cybersecurity or related field

Tools

SharePoint

Teams

Microsoft Office

Job description

Thomson Reuters is seeking a Lead, Cyber Incident Coordination within the Information Security Risk Management team to mature and coordinate enterprise incident response. This role emphasizes process and coordination over hands-on forensics, serving as a key point of contact during major security events.

You will support the Director and VP, drive timely responses, maintain incident records, and ensure remediation actions are completed post-incident, while collaborating with stakeholders across