# Associate Director, IT Security | Incident Response at Wolters Kluwer

Wolters Kluwer is hiring an Associate Director, IT Security | Incident Response. It pays $160k-$286k a year and Level rates it Little AI ●○○○; you can [apply on Wolters Kluwer](https://jobsbylevel.com/go/1786eb36-790b-49a8-b28c-04801a1a222b?utm_medium=ai-agent).

AI Level 1, AI centrality 36 out of 100. USA - Waltham, MA.

## Details

- Company: [Wolters Kluwer](https://jobsbylevel.com/companies/wolters-kluwer)
- AI level: AI Level 1 (score 36 out of 100)
- Location: USA - Waltham, MA
- Salary: $160k-$286k
- Posted: November 11, 2026
- Apply: https://jobsbylevel.com/go/1786eb36-790b-49a8-b28c-04801a1a222b?utm_medium=ai-agent
- Free CV review for this job: https://jobsbylevel.com/cv-review?job=associate-director-it-security-incident-response-at-wolters-kluwer-a80959

## Description

We have an exciting opportunity for an Associate Director, IT Security Incident Response to join our Global Information Security team. This role will lead the enterprise cybersecurity incident response program, ensuring the consistent, timely, and effective management of suspected and confirmed cybersecurity incidents across Wolters Kluwer. You will provide leadership throughout the full incident lifecycle, including detection, triage, investigation, containment, eradication, recovery, and post-incident improvement. The role requires strong expertise in incident command, investigative analysis, executive communication, and cross-functional coordination with Technology, Legal, Privacy, Risk, Compliance, and business stakeholders. You will also help shape and strengthen the technologies and operational capabilities that support incident response, including threat intelligence, EDR/XDR, DLP, SIEM, SOAR, digital forensics, and other detection and response technologies. Responsibilities Define and execute the enterprise cybersecurity incident response strategy and roadmap, aligning capabilities with business objectives and risk posture. Lead the end-to-end incident response lifecycle, including monitoring, detection, triage, investigation, containment, eradication, recovery, post-incident reviews, lessons learned, and problem management. Establish and oversee incident response operations, including 24x7 coverage, escalation pathways, and global coordination. Serve as the executive incident commander and primary escalation point for major cybersecurity incidents and crises. Build, mentor, and develop a high-performing security response team, strengthening expertise in incident response, detection, and Blue Team practices. Develop and maintain incident response plans, playbooks, runbooks, simulations, and tabletop exercises to validate organizational readiness and response effectiveness. Lead post-incident reviews, root cause analysis, lessons learned, and corrective actions, translating findings into measurable improvements. Support the operation and optimization of Blue Team technologies, including SIEM, SOAR, EDR/XDR, NDR, threat intelligence, and digital forensics platforms. Partner with security teams to improve monitoring and detection effectiveness through alert tuning, use-case development, expanded detection coverage, and false-positive reduction. Lead advanced investigations by synthesizing endpoint, network, cloud, identity, and threat intelligence data into risk-based response actions. Partner with engineering, infrastructure, cloud, application, and attack surface management teams to improve telemetry, address control gaps, and implement enhancements identified through incidents and threat intelligence. Ensure comprehensive incident documentation and reporting, including playbooks, runbooks, dashboards, metrics, and incident records that support operational, audit, regulatory, and legal requirements. Deliver clear and actionable communications on incidents, risks, and trends to technical teams, business stakeholders, and executive leadership. Define and track security operations KPIs, SLAs, and SLOs to measure performance and drive continuous improvement. Integrate cyber threat intelligence into detection, response, proactive threat identification, and executive-level threat briefings. Ensure incident response processes align with relevant regulatory, legal, and industry frameworks, including NIST and ISO standards. Partner with Risk, Legal, Privacy, and Compliance teams on incident handling, regulatory reporting, and enterprise risk management. Support the evaluation, integration, and optimization of security technologies, including the use of automation, AI, and advanced analytics to increase detection and response effectiveness. Partner with technology and product owners to maintain comprehensive security logging across applications, web services, WAF, cloud, network, infrastructure, and identity platforms,

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/associate-director-it-security-incident-response-at-wolters-kluwer-a80959

Source: https://jobsbylevel.com/jobs/associate-director-it-security-incident-response-at-wolters-kluwer-a80959

## Cite this page

Level. https://jobsbylevel.com/jobs/associate-director-it-security-incident-response-at-wolters-kluwer-a80959.

Get job alerts: https://jobsbylevel.com/newsletter