Director, Incident Response

Director DFIR (Complex Investigations)

We are looking for talented individuals with solid knowledge of Digital Forensics and Incident Response to join our Cyber & Data Resilience Practice as a Director! As a Director at Kroll, you will provide support and guidance to a wide variety of clients in managing their Incident Response Engagement. You will work alongside accomplished senior staff, enhancing your own DFIR expertise, while mentoring team members and delivering excellent service. You will be part of an award-winning and respected team supporting a global network of clients and colleagues.

Kroll’s elite security leaders deliver rapid responses for over 2,000 incidents per year and have the resources and expertise to support the entire incident lifecycle, including litigation demands.

Day-to-day Responsibilities

• Delivery of strong technical skills in support of cyber defense or incident response assignments.
• As Case Manager in the effective running of an assignment through to its closure, providing input to structuring projects, managing resources, presenting findings and providing commercially viable advice to the client.
• Monitors quality of own work and that of the assignment team, and ensures value is delivered to the client.
• Communicates regularly to senior members of the team, bringing case issues and findings to attention of appropriate personnel for resolution and decision making.
• Develop and maintain key client relationships, ensuring Kroll’s high standards of service and integrity are adhered to at all times.
• Support the development of staff by acting as mentor and ensuring Kroll’s high standards are met at all times.
• Ensure Key Performance Indicators (consisting of utilization rates, business generation and personal objectives) are consistently achieved.
• Identify own learning needs and opportunities, and continuously seek to improve personal performance.

Essential Traits:

• We are currently looking for individuals that hold the following skill and expertise:
  • Incident Response
  • Computer Forensics
  • Network Security
  • Computer Security Audit
• The individual must possess excellent project management skills, with ability to communicate effectively and build strong working relationships with both clients and colleagues across Kroll’s network of offices.
• Recommended seven (7) years incident response experience investigating and remediating cyberbreaches, preferably in a consultancy position.
• Desired qualifications: CREST IR, CFCE, ENCE, GIAC or other certification(s) would be beneficial (GCFA, GCIH, GREM, GNFA).
• Fluency in English is required together with fluency or native capability in the language of the country in which they will be based. Another language would be advantageous.
• Extensive experience of managing complex cases and successfully managing resources and budget.
• Ability to drive forward and co-ordinate a number of concurrent projects and tasks, managing competing demands.
• Clarity of thought and expression to win confidence from key stakeholders and colleagues.
• A highly professional and commercial approach to problem solving.
• Due to the range of assignments that you will manage across various industry-sectors and country locations, a key interest in global events and markets, with an awareness of working across different cultural and political environments is essential.
• Excellent written and verbal communication skills that help represent diverse communities.
Experience working with diverse teams.

About Kroll

Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century-long legacy, we blend trusted expertise with cutting-edge technology to navigate and redefine industry complexities. As a part of One Team, One Kroll, you'll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore, and maximize our clients’ value? Your journey begins with Kroll.

Kroll is committed to equal opportunity and diversity, and recruits people based on merit.

In order to be considered for a position, you must formally apply via careers.kroll.com.

#LI-RA1