Director - CSIRT (Cybersecurity Incident Response Team)

Job summary

Lead global CSIRT operations and 24/7 security response strategies across three continents. Serve as a trusted security advisor to executives while overseeing crisis management and regulatory response processes.

Job details

Director - CSIRT (Cybersecurity Incident Response Team) Location: Hybrid in Montreal, Canada Salary: CAD 172k-190k Join a leading global technology company powering the world’s travel infrastructure. We're seeking a Director to lead enterprise-wide cybersecurity response and operations. What You’ll Do: Direct global Computer Security Incident Response Team (CSIRT) operations spanning three continents, with 24/7 follow-the-sun coverage. Own and develop incident response, threat intelligence, and proactive cyber-exposure management strategies. Serve as the trusted security advisor to executive leaders. Collaborate with technical and business partners globally. Build and inspire high-performing, distributed cybersecurity teams. Develop and oversee crisis management, playbooks, and regulatory response processes. Ensure security programs are mature, scalable, and align with business risk. Innovate, build talent, and drive global operational excellence. About You: 15+ years in cybersecurity; 7+ years at the senior leadership level. Extensive experience managing large, multi-region Security Operations Centers (SOCs), including 24/7/365 support. Bachelor’s degree in a technical discipline or equivalent experience. Active CISSP, CISM, CISA, or similar credential. Strong expertise in incident response, threat intelligence, and vulnerability management. Mastery of frameworks such as MITRE ATT&CK, NIST CSF. Proven ability to communicate technical threats to executive and board audiences. Track record of building high-performing, diverse teams. Nice to Have: Experience in aviation, transportation, or critical infrastructure. Advanced sector or technical certifications. Hands-on forensics, threat hunting or red teaming experience. Knowledge of security platforms (Splunk, CrowdStrike, ServiceNow, CTI tools). Competitive compensation, flexible work, global teams, unique benefits, and a culture of growth await. Apply now to lead cybersecurity for what keeps the world moving forward!

What you’ll do

Lead global CSIRT operations and 24/7 security response strategies across three continents. Serve as a trusted security advisor to executives while overseeing crisis management and regulatory response processes.

Requirements

Requires over 15 years of cybersecurity experience with at least 7 years in senior leadership managing multi-region SOCs. A technical bachelor's degree and certifications such as CISSP, CISM, or CISA are required.

Benefits

• Competitive Compensation • Flexible Work • Unique Benefits

Listed skills

• Splunk · Preferred
• Team Leadership · Preferred
• crisis management · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Incident Response
• Threat Intelligence
• Cyber-exposure Management
• Crisis Management
• Vulnerability Management
• SOC Management
• Executive Communication
• Team Leadership
• MITRE ATT&CK
• NIST CSF
• Forensics
• Threat Hunting
• Red Teaming
• Splunk
• CrowdStrike
• ServiceNow

Job areas

• Security & Safety
• Technology
• Management & Leadership
• Transportation
• Software