Posted last month
Senior Manager, Incident Response
@ Kroll
Canada
Overview
Kroll is hiring a Senior Manager for Incident Response in its Cyber & Data Resilience Practice. The role manages digital forensics and incident response engagements from start to close, mentors junior staff and maintains client relationships. The posting states a salary of $150,000 to $200,000 CAD and that the role is remote.
Responsibilities:
- Support Case Manager through assignment closure
- Deliver technical incident response and cyber defense work
- Monitor quality of own work and team
- Develop and maintain key client relationships
- Mentor junior staff
Requirements summary:
- Six years incident response experience, preferably in consulting
- CREST IR, CFCE, ENCE or GIAC certifications preferred
- Fluency in English and local language of base country
- Experience managing complex cases, resources and budget
- Excellent written and verbal communication
- Bilingual English and French preferred
Tools & skills
Source and dates
Employer career site / ATS feed · oraclecloud
- Employer posting date
- 2026-10-02
- First seen by our source
- 2026-10-11
- Source record updated
- 2026-10-20
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Job details
| Seniority | Senior |
| Department | Sales |
| Experience | 6+ years |
| Manages people | Yes |
| Hours per week | 40 (estimated) |
| Work setting | Home, Client sites |
| Position | Mostly sitting |
| Physical demands | physical low · computer high |
| Languages | English, French |
| Licences & certifications | CREST IR, CFCE, ENCE |
Summary and details written by AI from the posting; the employer’s posting is the authority.
Kroll
| Field | Value |
|---|---|
| Open jobs on Jobsy | 6 |
We are looking for talented individuals with solid knowledge of Digital Forensics and Incident Response to join our Cyber & Data Resilience Practice as a Senior Manager! As a Senior Manager at Kroll, you will provide support and guidance to a wide variety of clients in managing their Incident Response Engagement. You will work alongside accomplished senior staff, enhancing your own DFIR expertise, while mentoring junior team members and delivering excellent service. You will be part of an award-winning and respected team supporting a global network of clients and colleagues.
Kroll’s elite security leaders deliver rapid responses for over 2,000 incidents per year and have the resources and expertise to support the entire incident lifecycle, including litigation demands.
Day-to-day Responsibilities
Delivery of strong technical skills in support of cyber defense or incident response assignments.
Supports the Case Manager in the effective running of an assignment through to its closure, providing input to structuring projects, managing resources, presenting findings and providing commercially viable advice to the client.
Monitors quality of own work and that of the assignment team, and ensures value is delivered to the client.
Communicates regularly to senior members of the team, bringing case issues and findings to attention of appropriate personnel for resolution and decision making.
Develop and maintain key client relationships, ensuring Kroll’s high standards of service and integrity are adhered to at all times.
Support the development of junior staff by acting as mentor and ensuring Kroll’s high standards are met at all times.
Ensure Key Performance Indicators (consisting of utilization rates, business generation and personal objectives) are consistently achieved.
Identify own learning needs and opportunities, and continuously seek to improve personal performance.
Essential Traits:
We are currently looking for individuals that hold the following skill and expertise:
Incident Response
Computer Forensics
Network Security
Computer Security Audit
The individual must possess excellent project management skills, with ability to communicate effectively and build strong working relationships with both clients and colleagues across Kroll’s network of offices.
Recommended six (6) years incident response experience investigating and remediating cyberbreaches, preferably in a consultancy position.
Desired qualifications: CREST IR, CFCE, ENCE, GIAC or other certification(s) would be beneficial (GCFA, GCIH, GREM, GNFA).
Fluency in English is required together with fluency or native capability in the language of the country in which they will be based. Another European or Arabic language would be advantageous.
Extensive experience of managing complex cases and successfully managing resources and budget.
Ability to drive forward and co-ordinate a number of concurrent projects and tasks, managing competing demands.
Clarity of thought and expression to win confidence from key stakeholders and colleagues.
A highly professional and commercial approach to problem solving.
Due to the range of assignments that you will manage across various industry-sectors and country locations, a key interest in global events and markets, with an awareness of working across different cultural and political environments is essential.
Excellent written and verbal communication skills that help represent diverse communities.
Experience working with diverse teams.
Candidates who are bilingual (English/French) are preferred.
About Kroll
Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century-long legacy, we blend trusted expertise with cutting-edge technology to navigate and redefine industry complexities. As a part of One Team, One Kroll, you'll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore and maximize our clients’ value? Your journey begins with Kroll.
In order to be considered for a position, you must formally apply via careers.kroll.com.
Kroll is committed to equal opportunity and diversity, and recruits people based on merit.
The current salary range for this position is $150,000 to $200,000 CAD
#LI-CN1
#LI-Remote
Journal
Only you can see this. Kept on this device, and in your account when you sign in.