Incident Response Lead - Cybersecurity (HYBRID)

McCormick Canada continues its long track record of growth and is a respected leader in the spice, seasoning, flavouring and specialty food industry.  Our consumer products division serves retail grocery customers and emerging channels with Club House, Billy Bee and McCormick products, while our Custom Flavour Solutions division serves food service distributors and other respected food manufacturers across Canada.  McCormick Canada is part of the world leader in spice and seasonings, McCormick & Company Inc.

The Power of People is one of our five pillars.  It has been the foundation for McCormick's success for decades.  There is something inspiring about working at McCormick.  We have created an unusually dedicated workforce by fostering a culture of respect, recognition, inclusion and collaboration based on the highest ethical values.  Without our employees, our success is not possible.  Our commitment to our customers, our consumers and our employees is unsurpassed. 

Position Overview:

We are looking to hire a Cyber Incident Response Lead to join our Cybersecurity Threat Management team. The Cyber Incident Response Lead, reporting to the Director of Cybersecurity Threat Management, will be responsible for Incident Response processes and coordination during incidents. Additionally, this person will assist the Director of Cybersecurity Threat Management with planning and execution of strategic security projects.

Key Responsibilities:

• Lead Incident Response activities including coordination and management of end-to-end process 
• Develop and maintain Incident Response Plans including creation, review, and updates to ensure effective response to enterprise security incidents 
• Coordinate with internal and external teams including IT, Legal, HR, Privacy, MSPs, and Vendors to ensure coordinated response to enterprise security incidents 
• Prepare detailed reports on incidents, including timelines, impact assessments, and mitigation actions taken 
• Develop and conduct incident response training sessions and tabletop exercises for the threat detection and response team and other stakeholders 
• Develop and track key performance indicators and metrics to measure the effectiveness of the incident response program 
• Assist in the planning, execution, and management of strategic cybersecurity projects, ensuring alignment with McCormick business objectives 
• Develop and maintain project schedules, track milestones, and ensure projects stay on track and within scope 

Required Qualifications:

• Bachelor's degree in computer science, information security, related degree, or measurable knowledge from serving in industry/military/government unit.  
• GCIA, GCIH, CREM, GIAC, CISSP or other relevant security professional certifications  
• Minimum 8 years’ professional experience working in cybersecurity or information technology 
• Minimum 3 years' experience in an incident response or security operations center role 
• Familiarity with incident response frameworks and methodologies, including frameworks like NIST 800-61 and MITRE ATT&CK. 
• Proven experience working with cross-functional teams within a large organization 
• Proven ability to successfully collaborate with business and technology leaders and teams  
• Experience with developing and implementing incident response plans 
• Experience with reporting and communicating incident details, improving incident response processes and recovering from security incidents

#LI-NP2

Throughout the selection process, accommodations for applicants with disabilities are available upon request.  Please notify H.R. if required.