Korn Ferry is exclusively partnering with one of its premier global Client to identify a high-caliber "Information Security Manager, Cyber Defense" for this role. In this role, you will represent a world-class organization known for its commitment to innovation and excellence, managing critical initiatives that drive their international success.

JOB OVERVIEW
The Manager, Cyber Defense reports to the Chief Information Security Officer (CISO) and is responsible for Vulnerability Management (VM) Program across cloud, APIs, applications, and endpoints, as well as supporting the Incident Response (IR) Program.
This role ensures vulnerabilities are identified, assessed, prioritized, and remediate efficiently, while establishing, deploying, and maturing an enterprise-wide IR program. SOC and incident support activities are secondary, focused on collaboration with the SOC and operational teams for mitigation and containment.
The position requires deep technical expertise in vulnerability management, IR program design, threat detection, and remediation, as well as leadership skills to manage a technical team and implement enterprise cyber defense initiatives.

EDUCATION AND EXPERIENCE

• Bachelors degree in Computer Science, Information Security, or related field (or equivalent experience).
• 7+ years in cybersecurity roles with experience in vulnerability management, cloud/API security, and incident response program management.
• Proven experience in designing, deploying, or maturing enterprise IR programs.
• Hands-on experience with vulnerability assessment tools, cloud security, and SOC operations support.

CERTIFICATIONS

• Vulnerability Management & Cyber Defense preferred
• CISSP or CISM preferred
• OSCP (Offensive Security Certified Professional) or GIAC vulnerability management certifications (GVPT, GMOB) preferred
• Cloud security certifications (CCSP, AWS/Azure Security Specialty) desirable
• Incident Response / IR preferred
• GCIH (GIAC Certified Incident Handler)
• GCFA (GIAC Certified Forensic Analyst)
• SANS incident response or IR tabletop simulation certifications (SEC504, SEC560) desirable
• CISA or Security+ for foundational knowledge