Director, DFIR

About the Role 

The Director provides tactical-strategic leadership for CYPFER's DFIR service line. The role ensuresdelivery excellence across large and multi-stream engagements, supports strategic account development, andprovides subject matter guidance across technical, operational, and managerial domains. The Director bridges deep technical understanding with governance, client influence, andorganizational capability building — overseeing Senior Managers,Managers, strengthening client relationships at senior levels, and ensuring high-quality, scalable delivery aligned with company strategy.  

  Core Responsibilities 

• Oversee delivery governance for large and multi-stream incident response and recovery engagements across the service line. 

• Ensure quality, consistency, and adherence to best practices across all engagements. 

• Direct and coordinate the work of Senior Managers and Managers to meet client expectations and delivery standards. 

• Guide Senior Managers and Managers in scoping, planning, and execution of complex delivery. 

• Ensure methods, standards, and service pillars are consistently applied across the DFIR service line. 

• Support escalation management and executive communication during high-severity incidents. 

• Provide subject matterexpertise during client meetings, proposals, and strategic discussions. 

• Influence client decisions through insights on industry trends, emerging risks, and CYPFER's service capabilities. 

• Partner with account management teams to strengthen client relationships and ensure alignment with strategic objectives. 

• Participate in on-call rotation for high-severity escalations; ability to engage outside normal business hours as needed. 
• This role is remote but requires flexibility to travel on short notice to client sites for critical engagements or strategic meetings. 

Team & Practice Contribution 

• Inspire and coach team members to align withorganizational vision and strategy. 

• Mentor Senior Managers, Managers, Senior Consultants, and Subject Matter Experts to enhance leadership and technical capabilities. 

• Support succession planning byidentifying and developing high-potential talent across the service line. 

• Foster a culture of collaboration, continuous learning, and accountability. 

• Contribute tomethodology evolution, tooling strategy, and delivery frameworks across the service line. 

• Contribute to strategic service-line direction by advising on market trends and evolving client needs. 

• Stay current with emerging threats, technologies, and regulatory requirements. 

• Provide strategic input for proposals, RFPs, and high-value client presentations. 

• Collaborate with BD teams on service positioning, competitive differentiation, and opportunity shaping. 

• Contribute to account growth strategies and support pipeline development. 

• Contribute to cross-functional projects andorganizational development. 

• Represent CYPFER at conferences, webinars, and thought leadership forums. 

  What We're Looking For 

• 10+ years of experience in DFIR, incident response, or a related cybersecurity domain, withdemonstrated progression into senior leadership roles. 

• Proven delivery governance capability — managing large or multi-stream engagements across a portfolio of Senior Managers and Managers. 

• Deep DFIR knowledge — sufficient technical credibility to guide Senior Managers,validate approaches, and provide subject matterexpertise with clients. 

• Advanced client relationship management — able toinfluence at senior and executive levels and navigate complex stakeholder environments. 

• Strongpeople leadership —track record of developing Managers, Senior Consultants, and technical specialists into high-performing practitioners. 

• Delivery governance and risk management —strong command of performance, scope, quality, and escalation oversight across multiple concurrent portfolios. 
• Strategic thinking combined with operational control — able to set direction whilemaintaining accountability for delivery outcomes. 
• Ability to communicate complex technical content to executive and board-level audiences. 

  Preferred Skills 

• Bachelor's or advanced degree in Cybersecurity, Computer Science, Business, or a related field — or equivalent demonstratedexpertise. 
• Industry certifications such as GCFA, GCFR, GCIH, CCFR, CCHF, AWS Certified or similar are a strong asset.