Associate Director, Incident Response and Forensics

CSL is seeking an Associate Director, Incident Response and Forensics to lead global cyber incident response for our biotechnology and vaccine operations. In this role, you will build and mature CSL's digital forensics and incident response (DFIR) capabilities, lead investigations of security events affecting critical research, manufacturing, and patient data, and coordinate containment, eradication, and recovery. You will manage a small DFIR team, direct external partners, develop playbooks and metrics, and collaborate with IT, compliance, and business leaders to reduce risk and strengthen CSL's security posture worldwide.

Responsibilities

• Lead CSL's global cyber incident response and digital forensics function
• Direct investigations of security incidents impacting research, manufacturing, and patient data
• Coordinate incident containment, eradication, recovery, and post-incident reviews
• Develop and maintain DFIR playbooks, runbooks, and standard operating procedures
• Manage and mentor a small DFIR team and oversee external security partners
• Implement monitoring, tooling, and metrics to detect and respond to threats quickly
• Collaborate with IT, compliance, and business leaders to reduce cyber risk
• Ensure incident handling aligns with regulatory, privacy, and pharmaceutical standards
• Provide executive reporting and recommendations on major incidents and trends
• Support continuous improvement of CSL's global cybersecurity program

Required Skills

• Incident response management
• Digital forensics (host, network, cloud)
• Malware analysis and threat hunting
• SIEM and security monitoring tools
• EDR/XDR platforms
• Network security and intrusion analysis
• Scripting/automation (Python, Power
• Shell or similar)
• Knowledge of NIST/SANS IR frameworks
• Regulatory and compliance awareness (e.g., Gx
• P, HIPAA, GDPR)
• Team leadership and stakeholder communication