Director, DFIR

About the Role

The Director provides tactical-strategic leadership for CYPFER's DFIR service line. T he role ensures delivery excellence across large and multi-stream engagements, supports strategic a ccount d evelopment, and provides subject matter guidance across technical, operational, and managerial domains. The Director bridges deep technical understanding with governance, client influence, and organizational capability building — overseeing Senior Managers , Managers, strengthening client relationships at senior levels, and ensuring high-quality, scalable delivery aligned with company strategy.

Core Responsibilities

Oversee delivery governance for large and multi-stream incident response and recovery engagements across the service line.

Ensure quality, consistency, and adherence to best practices across all engagements.

Direct and coordinate the work of Senior Managers and Managers to meet client expectations and delivery standards.

Guide Senior Managers and Managers in scoping, planning, and execution of complex delivery.

Ensure methods, standards, and service pillars are consistently applied across the DFIR service line.

Support escalation management and executive communication during high-severity incidents.

Provide subject matter expertise during client meetings, proposals, and strategic discussions.

Influence client decisions through insights on industry trends, emerging risks, and CYPFER's service capabilities.

Partner with account management teams to strengthen client relationships and ensure alignment with strategic objectives.

Participate in on-call rotation for high-severity escalations; ability to engage outside normal business hours as needed.

This role is remote but requires flexibility to travel on short notice to client sites for critical engagements or strategic meetings.

Team & Practice Contribution

Inspire and coach team members to align with organizational vision and strategy.

Mentor Senior Managers, Managers, Senior Consultants, and Subject Matter Experts to enhance leadership and technical capabilities.

Support succession planning by identifying and developing high-potential talent across the service line.

Foster a culture of collaboration, continuous learning, and accountability.

Contribute to methodology evolution, tooling strategy, and delivery frameworks across the service line.

Contribute to strategic service-line direction by advising on market trends and evolving client needs.

Stay current with emerging threats, technologies, and regulatory requirements.

Provide strategic input for proposals, RFPs, and high-value client presentations.

Collaborate with BD teams on service positioning, competitive differentiation, and opportunity shaping.

Contribute to account growth strategies and support pipeline development.

Contribute to cross-functional projects and organizational development.

Represent CYPFER at conferences, webinars, and thought leadership forums.

What We're Looking For

10+ years of experience in DFIR, incident response, or a related cybersecurity domain, with demonstrated progression into senior leadership roles.

Proven delivery governance capability — managing large or multi-stream engagements across a portfolio of Senior Managers and Managers.

Deep DFIR knowledge — sufficient technical credibility to guide Senior Managers, validate approaches, and provide subject matter expertise with clients.

Advanced client relationship management — able to influence at senior and executive levels and navigate complex stakeholder environments.

Strong people leadership — track record of developing Managers, Senior Consultants, and technical specialists into high-performing practitioners.

Delivery governance and risk management — strong command of performance, scope, quality, and escalation oversight across multiple concurrent portfolios.

Strategic thinking combined with operational control — able to set direction while maintaining accountability for delivery outcomes.

Ability to communicate complex technical content to executive and board-level audiences.

Preferred Skills

Bachelor's or advanced degree in Cybersecurity, Computer Science, Business, or a related field — or equivalent demonstrated expertise .

Industry certifications such as GCFA, GCFR, GCIH, CCFR, CCHF, AWS Certified or similar are a strong asset.