{"id":3222727,"url":"https://alion.io/job/huron-incident-response-manager-2","title":"Incident Response Manager","company":{"id":3031,"name":"Huron","domain":"huronconsultinggroup.com","url":"https://alion.io/company/huron","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":35,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":23,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chicago, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":140000,"max":190000,"currency":"USD","period":"year","gross":null,"usd_annual":190000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DLP","optional":false},{"name":"Jira","optional":true},{"name":"ServiceNow","optional":true}],"status":"live","first_seen_at":"2026-10-23T00:00:00Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-25T08:50:30Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Huron is redefining what a global consulting organization can be. Advancing new ideas every day to build even stronger clients, individuals and communities. We’re helping our clients find new ways to drive growth, enhance business performance and sustain leadership in the markets they serve. And, we’re developing strategies and implementing solutions that enable the transformative change they need to own their future.\nAs a member of the Huron corporate team, you’ll help to evolve our business model to stay ahead of market forces, industry trends and client needs. Our accounting, finance, human resources, IT, legal, marketing and facilities management professionals work collaboratively to support Huron’s collective strategies and enable real transformation to produce sustainable business results.\nJoin our team and create your future.\nThis individual is responsible for end-to-end incident coordination: driving investigations forward, managing the stakeholders who need to be informed or engaged, tracking every action item to closure, and maintaining the incident response process and reporting that leadership relies on. Scope spans breaches, data loss prevention (DLP) events, privacy incidents, fraud and identity matters, unauthorized access, workforce activity concerns, and data exposure events. The role requires sound judgment under pressure, precise written and verbal communication, and the ability to keep a wide set of technical and business stakeholders aligned while an incident is investigated.Key Responsibilities\nIncident coordination and investigation\nServe as the central coordinator for security and data incidents, driving investigations from initial detection through resolution and closure.\nPartner with investigators, forensics resources, IT, DLP, Legal, HR, and business stakeholders to keep active incidents moving and unblocked.\nCoordinate the response to breaches, DLP events, privacy incidents, fraud and identity matters, unauthorized access, workforce activity concerns, and data exposure events.\nSupport timely triage and severity assessment, ensuring the right people are engaged at the right time.\nStakeholder management and communication\nAct as a trusted point of contact for stakeholders across Legal, HR, Global Security, IT, and the business during active incidents.\nPrepare and deliver clear, timely status updates and executive-level briefings for leadership.\nCoordinate cross-functional communication so investigators, decision-makers, and affected business units stay aligned without duplicated or conflicting messaging.\nProvide flexibility to support incidents off-hours as needed, given the time-sensitive nature of the work.\nTracking, process, and reporting\nOwn the incident tracking system, ensuring every action item, remediation step, and follow-up is assigned, tracked, and driven to closure.\nMaintain and continuously refine incident response playbooks, processes, and procedures.\nProduce regular incident metrics and reporting, giving leadership an accurate, executive-level view of open, closed, and trending incidents.\nSupport post-incident reviews and lessons-learned sessions, feeding improvements back into process and playbooks.\nProgram scope and cross-functional collaboration\nCollaborate with the DLP, GRC, and BCP functions to ensure incident response integrates cleanly with adjacent security and continuity programs.\nSupport integration of incident response scenarios into business continuity and ransomware tabletop exercises.\nHelp ensure incidents are handled in a manner consistent with regulatory, privacy, and compliance obligations, in partnership with Legal and Compliance.\nIdentify and close gaps in incident response coordination, escalation paths, and stakeholder communication.\nQualifications\n5+ years of experience in incident response, security operations, GRC, or a related security coordination role, preferably in a large company or consulting firm.\nDemonstrated experience coordinating investigations or incidents involving multiple stakeholders and teams.\nUndergraduate degree required, preferably in Information Security, Information Technology, Information Systems, or a related discipline.\nWorking knowledge of incident response frameworks and practices, and of the security domains that generate incidents most often (DLP, identity and access, privacy, fraud).\nExcellent written and verbal communication skills, with the ability to brief both technical and executive audiences clearly and calmly.\nStrong organizational skills, with the ability to track many concurrent action items across multiple open incidents without losing detail.\nAbility to remain composed and effective under pressure, including flexibility to support incidents outside standard business hours.\nPreferred Skills\nSecurity certifications such as GCIH, GCFA, CISM, CISSP, or similar.\nExperience with case management or incident tracking tools (e.g., ServiceNow, Jira, ADO).\nFamiliarity with DLP, identity and access management, and privacy or fraud investigation practices.\nExperience producing metrics and reporting for senior leadership audiences.\nAnalytical problem-solving skills, including the ability to synthesize incident data into a format that supports leadership decision-making.\nExperience working across time zones and with distributed, cross-functional teams.\nThe estimated base salary for this job is $140,000 - $190,000. The actual salary paid to an individual will vary based on multiple factors, including but not limited to specific skills or certifications, years of experience, market changes, and required travel. This job is also eligible to participate in Huron’s annual incentive compensation program, which reflects Huron’s pay for performance philosophy. Inclusive of annual incentive compensation opportunity, the total estimated compensation range for this job is $168,000 - $228,000. The job is also eligible to participate in Huron’s benefit plans which include medical, dental and vision coverage and other wellness programs.\nPosition Level\nManagerCountry\nUnited States of America","description_format":"text","description_chars":6079,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Wellness"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","IT Consulting & Digital Transformation","Healthcare & Life Sciences Consulting","Enterprise Apps Implementation Partners"],"lifecycle":[{"event":"open","at":"2026-10-25T04:04:45Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":3,"expected_fill_days":23,"reasons":["conf:21","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-26T05:57:25Z"},"pay":{"stated_usd_annual":190000,"is_top_pay":true},"html_url":"https://alion.io/job/huron-incident-response-manager-2","json_url":"https://alion.io/job/huron-incident-response-manager-2.json","meta":{"generated_at":"2026-10-26T12:17:47Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16733,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3031},"rest":"https://alion.io/mcp/rest/get_company?id=3031"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhuron-incident-response-manager-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhuron-incident-response-manager-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhuron-incident-response-manager-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/huron-incident-response-manager-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhuron-incident-response-manager-2"}]}