Incident Response Director

Description and Requirements
The Team You Will Join
Located within MetLife's Global Resilience organization, the Incident Response function is to ensure MetLife is prepared and able to respond should an event disrupt the company, its employees, or its assets. We are seeking an Incident Response Director to work on-site in Cary, NC, where they will be responsible for managing the incident response lifecycle, from preparation to lessons learned. This role reports to the AVP of Global Resilience Preparedness and Response.
The Opportunity
The Incident Response Director will work closely with both cyber and physical security teams and play a critical role in coordinating the incident response process, Assess, Assemble, Act, Inform, Recover Close. This role will serve as a bridge between various security/cybersecurity and resilience functions across the globe. They will participate in developing enterprise policy, training, preparation activities and act as the main point of contact for the team, business partners, and external parties involved in the incident.
How You'll Help Us Build a Confident Future:

• Serves as a central point of contact during incidents, coordinating response efforts across multiple teams including IT, business operations, legal, and communication and collaborates to ensure timely and effective response coordination
• Coordinates the initial assessment and triage of incidents, including determining the severity, scope, and potential impact of the incident; prioritizes response efforts based on risk and criticality, ensuring resources are allocated effectively to contain and mitigate threats
• Supports the investigation and analysis of incidents to identify potential vulnerabilities; collects and analyzes relevant data and evidence, working closely with counterparts and business partners to understand the full scope of the incident and coordinate the implementation of corrective actions.
• Prepares incident updates for dissemination to senior business leaders.
• Conducts post-incident reviews and analysis of incidents to identify lessons learned, documents gaps in incident response process, and areas for improvement; supports the development and implementation of corrective actions and recommendations to enhance the organization's incident response capabilities and resilience
• Supports compliance with relevant regulatory requirements, industry standards, and contractual obligations related to incident response and data protection
• Designs, updates, and maintains comprehensive incident response plans tailored to threats and organizational needs; supports the regular review and testing of preparedness protocols, ensuring they are in line with current events, emerging threats, and changes in the organization's infrastructure
• Supports expansion of incident management partnerships with internal teams, including but not limited to Corporate Security, Cybersecurity, Government Relations, and Communications; proactively shares situation reports and after-action analysis
• Provides support to leadership through regular guidance to MetLife Security Operations Centre (MSOC) Operations Analysts (OAs) to assist with responding to emerging physical threats to MetLife personnel, assets, operations and reputation

What You Need to Succeed:

• At least 8 years of experience in a large- scale crisis management/ incident response field or an equivalent environment, whether in the public or private sector
• Experience of coordinating organizational response to both physical and cyber security incidents.
• A firm knowledge of relevant regulatory requirements pertaining to operational and cyber resilience
• Excellent interpersonal, oral and written communication, editing and presentation skills
• A keen analytical thinker with the aptitude to collate and validate multiple streams of information; comfortable acting within ambiguous circumstances
• Proven ability to fuse quantitative data and qualitative analysis and produce organization-specific operational assessments
• Experience in writing detailed situation reports and after-action reports for senior-level audiences.
• Functions well in a dynamic team environment, while also working independently on individual reporting deliverables
• Cybersecurity, privacy incident response, incident management, crisis management or business continuity exercise planning experience

What Can Give You an Edge:

• Industry standard crisis/ resilience certifications or cyber certifications.
• Foreign language ability/ Global Experience a plus

Benefits We Offer
Our U.S. benefits address holistic well-being with programs for physical and mental health, financial wellness, and support for families. We offer a comprehensive health plan that includes medical/prescription drug and vision, dental insurance, and no-cost short- and long-term disability. We also provide company-paid life insurance and legal services, a retirement pension funded entirely by MetLife and 401(k) with employer matching, group discounts on voluntary insurance products including auto and home, pet, critical illness, hospital indemnity, and accident insurance, as well as Employee Assistance Program (EAP) and digital mental health programs, parental leave, volunteer time off, tuition assistance and much more!
About MetLife
Recognized on Fortune magazine's list of the 2023 "World's Most Admired Companies" as well as the 2023 Fortune 100 Best Companies to Work For ®, MetLife , through its subsidiaries and affiliates, is one of the world's leading financial services companies; providing insurance, annuities, employee benefits and asset management to individual and institutional customers. With operations in more than 40 markets, we hold leading positions in the United States, Latin America, Asia, Europe, and the Middle East.
Our purpose is simple - to help our colleagues, customers, communities, and the world at large create a more confident future. United by purpose and guided by empathy, we're inspired to transform the next century in financial services. At MetLife, it's #AllTogetherPossible . Join us!
Equal Employment Opportunity/Disability/Veterans
If you need an accommodation due to a disability, please email us at [email protected]. This information will be held in confidence and used only to determine an appropriate accommodation for the application process.
MetLife maintains a drug-free workplace.
#BI-Hybrid