{"id":4086239,"url":"https://alion.io/job/global-payments-incident-response-coordinator-3","title":"Incident Response Coordinator","company":{"id":2520,"name":"Global Payments","domain":"globalpayments.com","url":"https://alion.io/company/globaltech-poland-sp-z-o-o","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":91,"open_postings":90,"ghost_share":0.044,"stale_share":0.178,"repost_share":0.122,"time_to_fill_p50_days":22,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Atlanta, United States","Columbus, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"Incident Management","optional":false},{"name":"Linux","optional":false},{"name":"NIST CSF","optional":false},{"name":"Unix","optional":false},{"name":"Windows","optional":false},{"name":"AWS","optional":true},{"name":"GCP","optional":true},{"name":"Google Workspace","optional":true},{"name":"ITIL","optional":true}],"status":"live","first_seen_at":"2026-11-11T18:59:06Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-12T01:26:39Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Job Description\nReady to take your career global?\nMake your mark at one of the biggest names in payments. As part of the Global Cybersecurity Incident Management (GCIM) team you will coordinate containment, eradication and post-incident activities for critical cyber security incidents. You will play a key role in the Incident Response Team (IRT) overseeing, validating and documenting containment acting as a point of escalation for our Global Security Operations Center (GSOC). Following security incident containment & recovery you will be responsible for engaging with key stakeholders for any Root Cause Analysis (RCA) and post-incident activity, ensuring we have reduced the chances of incident recurrence and assessed the efficiency of our incident response techniques and procedures.\nWhat you’ll own \nCoordinate incident response in line with the corporate security incident response plan.\nManage post-incident activity to include scheduling and chairing Post Incident Reviews (PIR), the documentation of Root Cause Analysis and the tracking of actions to prevent incident recurrence.\nProvides 24x7 on-call incident management support on rotation for critical security incidents.\nStays up to date with new and emerging threats that can affect the organization's information assets, third party software/solutions, IT configuration changes, and network/system.\nProvides executive level written communication during incident response for inquiries related to security incidents or assigned cases.\nCoordinate the remediation of findings from the organization’s Bug Bounty Program working directly with whitehat researchers.\nWorks closely with Risk Management teams to document identified risks and issues highlighted through post-incident or root cause analysis activities.\nMaintains a working knowledge of key data security frameworks and regulations such as PCI (Payment Card Industry)/Logical Security guidelines and models, HIPPA (Health Insurance Portability and Accountability Act), (GDPR) General Data Protection Regulation, PII (Personally Identifiable Information), NIST CSF (Cyber Security Framework).\nCollaborates with Legal and Privacy Offices throughout the company on critical data protection/security incidents.\nParticipates in reviews and assessments to provide recommendations to enhance or improve the security posture of environments as part of post incident activities and lessons learned.\nMaintain and follow runbooks for day-to-day incident response activities in line with the corporate security incident response plan.\n\nWhat you’ll bring\nRelevant Experience or Degree in: Bachelor's degree in Computer Science, Info Security, or related field. Or relevant work experience in a related field.\nTypically Minimum 2 Years Relevant Experience with Incident Management or Incident Response\nKnowledge of network operations or engineering or system administration on Unix, Linux, MAC (Message Authentication Code), or Windows; common security operations, intrusion detection systems, Security Incident Event Management systems, Penetration Testing, Web Application assessment, Secure Coding practices, Cloud Technologies.\nStrong verbal and written communication skills.\nDemonstrated ability to effectively communicate ideas and persuade others to accomplish challenging goals and objectives.\nAbility to facilitate meetings and enable discussions that lead to resolution and communicate results.\nSkills / Knowledge - Developing professional expertise, applies company policies and procedures to resolve a variety of issues.\nJob Complexity - Works on problems of moderate scope where analysis of situations or data requires a review of a variety of factors. Exercises judgement within defined procedures and practices to determine appropriate action. Builds productive internal/external working relationships.\nSupervision - Normally receives general instructions on routine work, detailed instructions on new projects or assignments.\nIndustry Knowledge - Continued self-education of new and emerging threats and relevant processes, controls, or technologies to mitigate them.\nIncident Response - Knowledge and skills to contribute to all phases of Incident Response.\nIt’s a bonus if you have\nITIL V4\nProfessional security certifications such as CompTIA Security+/ Cybersecurity Analyst+, or Systems Security Certified Practitioner (SSCP), or CISM(Certified Information Security Manager), or CISA(Certified-Information-Systems-Auditor), or GSEC (GIAC Security Essentials), or GCIH (GIAC Certified Incident Handler)\nKnowledge of industry standard security compliance programs PCI (Payment Card Industry), GDPR (General Data Protection Regulation), NIST Cyber Security Framework etc.)\nCloud Knowledge or certifications such as Google Cloud Fundamental or AWS Foundations\nExperience working in Google Workspace and JIRA.\nAbout the team\nOur inclusive and global teams win together every day. We’re proud to have the best minds in the industry, who you can learn from as you grow your career. The people, the energy, the connections - it’s unmatched. Come and be part of an ever-evolving company and get dynamic opportunities that go beyond borders.\nWhat makes a Globalpayer?\nGlobalpayers think like a client, act like an owner and win as one team. We’re curious and innovative - always finding better ways to deliver impact. We empower each other to make decisions, and it’s our passion that drives excellence in everything we set out to do.\nDoes this sound like you? Then you sound like a Globalpayer. Apply now to take your career global.\nhttps://jobs.globalpayments.com/en/why-global-payments/benefits/\nApplicant must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; We will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa).\nDiversity and EEO Statements\nGlobal Payments is an organization that stands against racism, intolerance and injustice in all its forms - one that respects, honors and celebrates the diversity of our team members and the differences among us. Our commitment to fostering a company culture that values and respects Inclusion and Diversity is steadfast. Standing together as one company, we will continue to work to drive positive change for the communities in which we live and work and stamp out injustice. \nGlobal Payments is an equal opportunity employer. Global Payments provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex (including pregnancy), national origin, ancestry, age, marital status, sexual orientation, gender identity or expression, disability, veteran status, genetic information or any other basis protected by law. Those applicants requiring reasonable accommodation to the application and/or interview process should notify a representative of the Human Resources Department.\nEEOC Statement\nGlobal Payments is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, genetic information, national origin, disability, veteran status, and other protected characteristics. The EEO is the Law poster is available here.\nIf you are made a conditional offer of employment and will be working in the United States, you will be required to undergo a drug test. In developing this job description care was taken to include all competencies and requirements needed to successfully perform the position. Reasonable accommodations will be provided for individuals with qualified disabilities both during the hiring process, as well as to allow the individual to perform the essential functions of the job, if hired.\nWashington Candidates: Click here for information on the Fair Chance Act.","description_format":"text","description_chars":7926,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","POS Systems","Cards & Card Issuing","Payment Processing & Gateways"],"lifecycle":[{"event":"open","at":"2026-11-11T18:59:06Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 1 · green card filings: 5","filings_12m":1,"filings_prev_12m":39,"green_card_filings_12m":5,"median_offered_wage_usd":116667,"route":null,"cap_exempt":false,"checked_at":"2026-11-11T07:38:50+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":22,"reasons":["conf:0","win:early","comp:junior,brand"],"computed_at":"2026-11-12T01:46:49Z"},"pay":null,"html_url":"https://alion.io/job/global-payments-incident-response-coordinator-3","json_url":"https://alion.io/job/global-payments-incident-response-coordinator-3.json","meta":{"generated_at":"2026-11-12T01:46:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4080,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2520},"rest":"https://alion.io/mcp/rest/get_company?id=2520"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fglobal-payments-incident-response-coordinator-3"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fglobal-payments-incident-response-coordinator-3"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fglobal-payments-incident-response-coordinator-3"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/global-payments-incident-response-coordinator-3\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fglobal-payments-incident-response-coordinator-3"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4086239}},{"tool":"search_jobs","arguments":{"company":"globalpayments.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4086239},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}