We are looking for talented individuals with solid knowledge of Digital Forensics and Incident Response to join our Cyber & Data Resilience Practice as a Director! As a Director at Kroll, you will provide support and guidance to a wide variety of clients in managing their Incident Response Engagement. You will work alongside accomplished senior staff, enhancing your own DFIR expertise, while mentoring team members and delivering excellent service. You will be part of an award-winning and respected team supporting a global network of clients and colleagues.
Kroll’s elite security leaders deliver rapid responses for over 2,000 incidents per year and have the resources and expertise to support the entire incident lifecycle, including litigation demands.
Day-to-day Responsibilities
Delivery of strong technical skills in support of cyber defense or incident response assignments.
As Case Manager in the effective running of an assignment through to its closure, providing input to structuring projects, managing resources, presenting findings and providing commercially viable advice to the client.
Monitors quality of own work and that of the assignment team, and ensures value is delivered to the client.
Communicates regularly to senior members of the team, bringing case issues and findings to attention of appropriate personnel for resolution and decision making.
Develop and maintain key client relationships, ensuring Kroll’s high standards of service and integrity are adhered to at all times.
Support the development of staff by acting as mentor and ensuring Kroll’s high standards are met at all times.
Ensure Key Performance Indicators (consisting of utilization rates, business generation and personal objectives) are consistently achieved.
Identify own learning needs and opportunities, and continuously seek to improve personal performance.
Essential Traits:
We are currently looking for individuals that hold the following skill and expertise:
Incident Response
Computer Forensics
Network Security
Computer Security Audit
The individual must possess excellent project management skills, with ability to communicate effectively and build strong working relationships with both clients and colleagues across Kroll’s network of offices.
Recommended six (6) years incident response experience investigating and remediating cyberbreaches, preferably in a consultancy position.
Desired qualifications: CREST IR, CFCE, ENCE, GIAC or other certification(s) would be beneficial (GCFA, GCIH, GREM, GNFA).
Fluency in English is required together with fluency or native capability in the language of the country in which they will be based. Another language would be advantageous.
Extensive experience of managing complex cases and successfully managing resources and budget.
Ability to drive forward and co-ordinate a number of concurrent projects and tasks, managing competing demands.
Clarity of thought and expression to win confidence from key stakeholders and colleagues.
A highly professional and commercial approach to problem solving.
Due to the range of assignments that you will manage across various industry-sectors and country locations, a key interest in global events and markets, with an awareness of working across different cultural and political environments is essential.
Excellent written and verbal communication skills that help represent diverse communities.
Experience working with diverse teams.
About Kroll
Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century-long legacy, we blend trusted expertise with cutting-edge technology to navigate and redefine industry complexities. As a part of One Team, One Kroll, you'll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore and maximize our clients’ value? Your journey begins with Kroll.
In order to be considered for a position, you must formally apply via careers.kroll.com.
Kroll is committed to equal opportunity and diversity, and recruits people based on merit.
The current salary range for this position is $200,000 to $250,000 CAD
#LI-CN1
#LI-Hybrid
Skills Required
- Incident Response
- Computer Forensics
- Network Security
- Computer Security Audit
- Project management skills
- Recommended six years incident response experience
- Certifications (CREST IR, CFCE, ENCE, GIAC, GCFA, GCIH, GREM, GNFA)
- Fluency in English and host country language
- Extensive experience managing complex cases, resources and budgets
- Ability to coordinate multiple concurrent projects and tasks
- Excellent written and verbal communication skills
- Experience working with diverse teams
Kroll Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Kroll and has not been reviewed or approved by Kroll.
-
Healthcare Strength — Medical, dental, and vision coverage with HSA/FSA options are part of the U.S. package, alongside life and AD&D. Breadth across core health benefits is positioned as competitive for a large advisory firm.
-
Retirement Support — A 401(k) plan with company match is a core element of the package. Retirement support is consistently highlighted as competitive within total rewards.
-
Leave & Time Off Breadth — Paid holidays, sick leave, and PTO are included, with generous time off and parental/family leave for U.S. roles. Some roles also offer hybrid/WFH flexibility that complements time-off usability.
Kroll Insights
What We Do
Kroll is the world’s premier provider of services and digital products related to valuation, governance, risk and transparency. We work with clients across diverse sectors in the areas of valuation, expert services, investigations, cyber security, corporate finance, restructuring, legal and business solutions, data analytics and regulatory compliance. Our firm has nearly 5,000 professionals in 30 countries and territories around the world. For more information, visit www.kroll.com.
