Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted yesterday

Associate Director, IT Security | Incident Response

Wolters Kluwer464 open roles

Pay
$160,100 – $286,000 a year
Where
USA Waltham MA
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowAssociate Director, IT Security | Incident ResponseWolters Kluwer · USA Waltham MA

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Wolters Kluwer's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.9% of postings close within 7 days. Measured by our own scanner across the market. Wolters Kluwer postings stay open a median of 41 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.9%7 days
  4. 22.4%14 days
  5. 38.1%30 days
  6. 59.0%60 days
This job: posted yesterday

Wolters Kluwer median: 41 days open

The posting

We have an exciting opportunity for an Associate Director, IT Security Incident Response to join our Global Information Security team. This role will lead the enterprise cybersecurity incident response program, ensuring the consistent, timely, and effective management of suspected and confirmed cybersecurity incidents across Wolters Kluwer.

You will provide leadership throughout the full incident lifecycle, including detection, triage, investigation, containment, eradication, recovery, and post-incident improvement. The role requires strong expertise in incident command, investigative analysis, executive communication, and cross-functional coordination with Technology, Legal, Privacy, Risk, Compliance, and business stakeholders.

You will also help shape and strengthen the technologies and operational capabilities that support incident response, including threat intelligence, EDR/XDR, DLP, SIEM, SOAR, digital forensics, and other detection and response technologies.

Responsibilities

  • Define and execute the enterprise cybersecurity incident response strategy and roadmap, aligning capabilities with business objectives and risk posture.
  • Lead the end-to-end incident response lifecycle, including monitoring, detection, triage, investigation, containment, eradication, recovery, post-incident reviews, lessons learned, and problem management.
  • Establish and oversee incident response operations, including 24x7 coverage, escalation pathways, and global coordination.
  • Serve as the executive incident commander and primary escalation point for major cybersecurity incidents and crises.
  • Build, mentor, and develop a high-performing security response team, strengthening expertise in incident response, detection, and Blue Team practices.
  • Develop and maintain incident response plans, playbooks, runbooks, simulations, and tabletop exercises to validate organizational readiness and response effectiveness.
  • Lead post-incident reviews, root cause analysis, lessons learned, and corrective actions, translating findings into measurable improvements.
  • Support the operation and optimization of Blue Team technologies, including SIEM, SOAR, EDR/XDR, NDR, threat intelligence, and digital forensics platforms.
  • Partner with security teams to improve monitoring and detection effectiveness through alert tuning, use-case development, expanded detection coverage, and false-positive reduction.
  • Lead advanced investigations by synthesizing endpoint, network, cloud, identity, and threat intelligence data into risk-based response actions.
  • Partner with engineering, infrastructure, cloud, application, and attack surface management teams to improve telemetry, address control gaps, and implement enhancements identified through incidents and threat intelligence.
  • Ensure comprehensive incident documentation and reporting, including playbooks, runbooks, dashboards, metrics, and incident records that support operational, audit, regulatory, and legal requirements.
  • Deliver clear and actionable communications on incidents, risks, and trends to technical teams, business stakeholders, and executive leadership.
  • Define and track security operations KPIs, SLAs, and SLOs to measure performance and drive continuous improvement.
  • Integrate cyber threat intelligence into detection, response, proactive threat identification, and executive-level threat briefings.
  • Ensure incident response processes align with relevant regulatory, legal, and industry frameworks, including NIST and ISO standards.
  • Partner with Risk, Legal, Privacy, and Compliance teams on incident handling, regulatory reporting, and enterprise risk management.
  • Support the evaluation, integration, and optimization of security technologies, including the use of automation, AI, and advanced analytics to increase detection and response effectiveness.
  • Partner with technology and product owners to maintain comprehensive security logging across applications, web services, WAF, cloud, network, infrastructure, and identity platforms, identifying and remediating telemetry gaps.
  • Maintain response procedures for cloud, SaaS, identity-provider, managed-service, and critical-supplier incidents, including notification, evidence-access, cooperation, and recovery requirements.

Qualifications

  • Bachelor’s degree in Computer Science, Management Information Systems, a related discipline, or equivalent professional experience.
  • 10+ years of experience in Information Technology, cybersecurity, security operations, IT service management, or related areas.
  • 5+ years of professional experience in information security, cybersecurity incident response, incident management, security risk management, or related functions.
  • Demonstrated experience leading complex cybersecurity investigations and incident response activities.
  • Experience operating in or supporting a 24x7x365 security operations environment.
  • Experience engaging with senior and executive leadership during cybersecurity incidents, including communicating technical findings, business impact, risk, and recommended actions.
  • Experience with threat intelligence, SIEM, SOAR, EDR/XDR, and related security technologies. Examples may include Microsoft Sentinel, CrowdStrike, ThreatConnect, Recorded Future, Swimlane, or comparable platforms.
  • Experience with digital forensics and forensic investigation tools and techniques across cloud, endpoint, and other environments.
  • Knowledge of security vulnerabilities, threat vectors, malicious code, network security, host/system security, identity, and access controls.
  • Experience with risk analysis and risk management.
  • Working knowledge of incident response and cybersecurity frameworks and standards, including NIST CSF, NIST 800-53, ISO 27001, and PCI DSS.
  • Experience supporting privacy, regulatory, and compliance requirements, including GDPR.
  • Familiarity with ITIL service management methodology.
  • Ability to develop, execute, and assess incident response exercises, including tabletop exercises and Red Team/Blue Team activities.
  • Strong analytical, investigative, problem-solving, and decision-making skills.
  • Excellent written and verbal communication skills with the ability to translate complex technical issues for both technical and non-technical audiences.
  • Demonstrated discretion and integrity when handling sensitive, confidential, and restricted information.
  • Ability to prioritize and lead effectively during high-pressure cybersecurity incidents.
  • Flexibility to support a global organization and respond to significant incidents outside standard business hours when required.

Preferred Qualifications

  • Professional certifications such as CISSP, GCIH, GCFA, GCFE, GCTI, ITIL, or other relevant cybersecurity certifications.
  • Advanced programming or scripting knowledge.
  • Experience assessing the security posture of external service providers and third parties.
  • Experience with security automation, AI-enabled security operations, and advanced analytics.
  • Multilingual capabilities are a plus.

Travel Requirements

  • Occasional domestic or international travel, up to 25%.

Our Interview Practices

To maintain a fair and genuine hiring process, we kindly ask that all candidates participate in interviews without the assistance of AI tools or external prompts. Our interview process is designed to assess your individual skills, experiences, and communication style. We value authenticity and want to ensure we’re getting to know you—not a digital assistant. To help maintain this integrity, we ask to remove virtual backgrounds and include in-person interviews in our hiring process. Please note that use of AI-generated responses or third-party support during interviews will be grounds for disqualification from the recruitment process.

Applicants may be required to appear onsite at a Wolters Kluwer office as part of the recruitment process.

Compensation:

$160,100.00 - $286,000.00 USD

This role is eligible for Bonus.

Compensation range listed is based on primary location of the position. Actual base salary offer is influenced by a wide array of factors including but not limited to skills, experience and actual hiring location. Your recruiter can share more information about the specific offer for the job location during the hiring process.

Additional Information:

Wolters Kluwer offers a wide variety of competitive benefits and programs to help meet your needs and balance your work and personal life, including but not limited to: Medical, Dental, & Vision Plans, 401(k), FSA/HSA, Commuter Benefits, Tuition Assistance Plan, Vacation and Sick Time, and Paid Parental Leave. Full details of our benefits are available upon request.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Wolters Kluwer's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Wolters Kluwer's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Wolters Kluwer's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.