Incident Coordinator

Established in 2006, CyberClan’s carefully selected team of experts are capable of solving complex cyber security challenges – keeping data secure and businesses running as usual. CyberClan’s Global Incident Response Teams are available 24/7/365 to leap into action, responding to all cyber attacks with proven defensive methodology, we quickly identify, contain, eradicate and recover from a cyber attack. Our goal is to get businesses fully operational as quickly as possible and to further prevent any downtime or impact to the business operations.

Summary/Objective

The Incident Response Coordinator acts as the interface between the company and often an attorney and or insurance company or Board members of companies during an organization's time of crisis. It is therefore critical that any candidate has good written and oral skills and is able and confident to communicate with sophisticated individuals and is also capable of good time management and able to meet deadlines.

The ideal candidate will have knowledge or experience of working in a cyber security firm, specifically in Incident Response. Demonstrable project management experience, legal, and insurance industry experiences are also preferred skills.

The candidate will be responsible for being the lead point of contact and engagement manager throughout the active case, until project completion. You will liaise with key internal (the technical forensic investigators, the project administrator, the technical report writing team, the sales team and external stakeholders throughout the project lifecycle, which will include the client, legal counsel, the insurance company and applicable third-party suppliers.

This role reports to the Director of Global Incident Response Operations

Essential Functions

• Determining and defining project scope and objectives
• Predicting resources needed to obtain objectives and manage resources effectively and efficiently
• Preparing budgets based on the scope of work and required resources
• Tracking project costs to meet budget goals
• Developing and managing project schedules and work agendas
• Providing project updates consistently to multiple stakeholders, clients, and leadership
• Managing client contracts and communicating tasks and expected deliverables
• Utilizing industry best practices, techniques, standards, and requirements, throughout the entire project execution
• Monitoring progress and adjusting as needed Measuring project performance and identifying areas for improvement
• Being the main point of client contact for global Incident Response matters
• Working to support the internal IR teams with all client engagements
• Responding to matters via phone and email to hotline enquiries in the “alerts cert hotline” channel
• Creating internal project channels and email threads
• Identifying inbound project channels and ensuring adherence to established workflows and customizations
• Setting and complying with project timelines
• Scheduling regular and structured client/counsel calls and meetings throughout the project with appropriate agendas
• Preparing all Statements of Work for each project
• Ensuring time recording and tracking is done regularly and timely to ensure alignment to project pricing and budget
• Liaising with third party suppliers for additional services as needed
• Overseeing all assigned projects
• Ensuring the quality of all Client facing communications and documentation by working with the relevant team
• Ensuring projects are completed within appropriate timeframes and to quality expectations
• Working as a team to ensure that all regions have a standard approach for all projects
• Assisting to create file links with the relevant systems to share information with the client as needed
• Working with the Project Assistant to ensure all opportunity information is entered into the relevant systems
• Assisting with documenting processes, and ensuring that they are regularly updated as required
• Being the point of escalation for any client concerns, including potential management and mitigation of high-pressure situations, with clients under duress
• Collecting all relevant billing information and submitting billing requests in a timely manner
• Being on call for weekends on a rotation basis
• Being an advocate for CyberClan and ensuring the relevant departments are engaged at the appropriate time
• Maintain existing relationships with insurers, legal counsel, solicitors and any relevant client
• Develop and refine specific coordination playbooks for distinct incident types (e.g., Ransomware vs. Business Email Compromise) to standardise service delivery speed across regions.
• Coordinate the specific workflow for PII/PHI data review and mining. Act as the bridge between the forensic team extracting data and the eDiscovery/Review vendors to ensure strict adherence to regulatory notification timelines.
• Serve as the initial point of contact for scope creep or billing disputes, resolving any initial commercial friction.
• Conduct Lessons Learned sessions focused solely on the administrative and communication aspects of the engagement to improve future client retention and SLA adherence.

Required Skills and Experience

• Exceptional written and verbal communication skills in English (Knowledge of other languages is considered a plus)
• Exceptional people skills and the ability to manage and motivate a team
• Outstanding attention to detail and organizational skills
• Experience in Project Management or a similar role
• Understanding of Cyber Security best practices
• Proven ability to meet deadlines
• Excellent analytical and reporting abilities
• Identifying and referring business opportunities
• Experience working with key stakeholders to build new processes and procedures and ensure effective implementation
• Strong conflict resolution skills and the ability to solve problems under pressure
• Creative in solving problems and possessing impeccable judgement in making decisions
• Ability to self-manage and prioritize multiple workloads simultaneously

The base salary range for this position in Canada is $55,000- $68,000 CAD. A candidate's salary is determined by various factors including, but not limited to, relevant work experiences, skills, certifications & location.

Job Type

Full-time/Exempt

Location

100% Telecommuting

%of Travel Required

0-5%

Physical Requirements

Prolonged periods of sitting at a desk and working on a computer

CyberClan is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status.

#J-18808-Ljbffr