Cybersecurity Incident Commander

About the role

Thrive is expanding its cybersecurity capabilities and seeks a seasoned Incident Commander to lead critical security incidents. You will be the single point of accountability for high‑severity incidents, guiding containment, eradication, recovery, and client communication with authority.

Key responsibilities

• Lead complex or high‑priority cybersecurity incidents from initial scoping through post‑incident review.
• Coordinate all internal and client‑facing actions, ensuring alignment with Thrive’s incident response methodology.
• Set operational tempo, assign task owners, and communicate timelines, dependencies, and roadblocks in real time.
• Drive incident lifecycle management focused on containment, minimizing business disruption, and maintaining security assurance.
• Maintain clear communication with client stakeholders and Thrive leadership, providing updates on threat behavior, system impact, and business risk.
• Lead conference bridges, approve restoration plans, and serve as the public face of Thrive during a cybersecurity crisis.
• Provide real‑time risk assessments to executive teams, IT leads, and legal stakeholders, and assist with cyber‑insurance or legal coordination when needed.
• Advocate for long‑term maturity improvements and continuously enhance Thrive’s playbooks and escalation frameworks.

Required profile

• Proven experience leading high‑severity cybersecurity incidents.
• Strong executive presence and ability to communicate clearly under pressure.
• Excellent coordination skills across multiple technical and business teams.
• Ability to assess risk quickly and make decisive recommendations.
• Commitment to continuous improvement of incident response processes.

Required skills

What we offer

• Dynamic "work hard, play hard" environment.
• Opportunities for training, mentorship, and career growth.
• Exposure to cutting‑edge cloud and security technologies.