Position Summary As a member of the IT Management Team, you are responsible for managing, developing, and leading a team of employees. Your role includes leading the specific functional responsibilities of your team, which involves overseeing team performance and deliverables. However, your role as a leader within our organization requires more than the management of resources and day-to-day operations. As a steward of the company, you are charged with the development and execution of your team's strategic vision and plan and ensuring that your team's actions align with the larger goals of the company and the IT Division.
The role of every Information Security team member is to support the overarching values and business goals of Costco Wholesale as they relate to meeting legal, ethical, and regulatory obligations; protecting member's and employee's privacy; and maintaining a security technology environment for our operations. The Incident Response manager is responsible for leading and managing the organization's Incident Response function, ensuring the timely, effective, and coordinated response to cybersecurity incidents and cyber crises across the enterprise. This role provides operational leadership throughout the incident lifecycle, from initial triage and investigation through containment, eradication, recovery, and post-incident improvement.
As the primary conduit between your employees and upper leadership, your role in communicating and modeling the values and guiding principles of our company culture is of vital importance. All members of IT Management should strive to consciously and consistently foster a culture of engagement, trust, and "open door" communication.
Job Duties/Essential Functions- INTEGRITY: When achieving benchmarks and goals, use methods/strategies that are consistent with the Code of Ethics and the Standard of Ethics for Managers and Supervisors. Always leads by example. Appropriately handles employee concerns and follows through to resolution.
- MEMBER SERVICE: Provides and ensures staff provides an exceptional member experience.
- ADMINISTRATION: Ensures proper department coverage (writing schedule and break aids if needed). Understands department budget, able to research and explain budget variances.
- MANAGING PERFORMANCE: Coaches and mentors' employees to provide support and guidance. Has regular open and honest conversations with employees to discuss work performance and career development. Identifies learning opportunities to strengthen employee knowledge, skill, and ability.
- COMMUNICATION: Regularly shares information with employees via meetings and one-on-one conversations. Successfully navigates difficult conversations with employees, members, and suppliers. Listens, expresses empathy, and adapts to get points across. Addresses issues immediately to ensure a timely resolution and to avoid escalating the situation. Consistently demonstrates business knowledge during interactions with senior management.
- SELF-MANAGEMENT: Demonstrates sound judgment, taking a partner when necessary. Ability to maintain self-control in the face of hostility or provocation or in intense, hectic situations.
- INCLUSION: Encourages different approaches and ideas to work and to accomplish goals. Seeks employee input. Takes the time to get to know or reach out to candidates who show potential that may not come forward on their own.
- COMPLIANCE AND SAFETY: Takes measures to ensure employee and member information is kept confidential and adheres to IS security policy.
- Oversees and is accountable for 24X7 operational readiness and response capability and supporting the Security Operations Center.
- Leads during high-severity and enterprise-impacting incidents, coordinating cross functional technical teams, security partners, business stakeholders, executive leadership, legal, and other critical response partners to minimize risk and business impact.
- Possesses calm decisive leadership in high pressure situations, able to establish priorities, facilitate clear communication, and maintain accountability throughout complex investigations.
- Develops, refines, and maintains a mature, scalable, and continuously improving Incident Response program aligned with industry standards, organizational risk tolerance, regulatory requirements, strategic business objectives, and Costco's core values.
- Leads in the IR process, playbooks, exercises, operational readiness, metrics, lessons learned, and continuous improvement initiatives to strengthen Costco's cyber resilience.
- Develops IR Engineers and Analysts, defines roles and responsibilities, establishes accountability, career development, staffing, and operational readiness.
- Oversees evidence preservation, investigative activities, containment strategies, eradication efforts, recovery activities, and appropriate documentation.
- Provides guidance and decision support during complex or ambiguous incidents where information may be incomplete and conditions may change rapidly.
- Identifies and assesses internal and external cybersecurity risks that threaten the security of Costco business operations.
- Develops and formalizes effective threat identification and assessment processes, including maintaining playbooks for obtaining, monitoring, assessing, classifying severity, and responding to evolving threats and vulnerabilities.
- Develops, maintains, and updates a repository of cybersecurity threat information that may be used in conducting risk assessments and reports on cyber risk trends.
- Works closely with various international Information Technology teams, state agencies and 3rd party vendors to develop a fuller understanding of the intent, objectives, and activity of cyber threat actors and emerging threats.
- Provides leadership and the IR team with a contextual snapshot of the Incident Response team challenges for multiple uses by the team and management.
- Participates in the assessment, analysis, and design of solutions to support the Incident Response lifecycle.
- Provides mentoring and training to Incident Response and partners.
- This is a full-time management/leadership position (45+ hours per week).
- Regular and reliable workplace attendance at your assigned location.
Ability to operate vehicles, equipment or machinery.- Computer, phone, printer, copier, fax
Non-Essential Functions- Assists in other areas of the department as necessary.
- Assists in other areas of the company as necessary.
Ability to operate vehicles, equipment or machinery.- Same as essential functions
Experience, Skills, Education & Licenses/CertificationsRequired:- Industry certification including SANS GSEC, GCIA, GCIH, or similar.
- High degree of ethics/confidentiality required and may be required to pass security screening.
- Ability to provide accurate analysis that minimizes bias and error.
- Ability to develop processes and tools to effectively share actionable intelligence information.
- Ability to work effectively, independent of assistance or supervision.
- Ability to work under pressure in a highly team focused environment is required.
- Innovative, creative, and extremely responsive with a strong sense of urgency.
- Willing to share knowledge and assist others in understanding technical and business topics.
- Willingness to work outside of regular business hours as required, which can include evenings, weekends and holidays.
- HIPAA Training and Supervisors Orientation (within 30 days of hire); Leadership Development 101 (within one year); Costco Pay Policies (within 90 days of promotion).
Recommended: - A Bachelor's degree in Computer Science or a minimum of 6 years' information security experience with a focus on software and tool development.
- Experience with scripting languages such as Python.
- Rule correlation evaluation and development experience highly recommended but not required.
- Proficient in Google Workspace applications, including Sheets, Docs, Slides, and Gmail.
- Successful internal candidates will have spent one year or more on their current team.
Other Conditions- Management will review the Job Analysis for this position prior to a job offer.
Required Documents• Cover Letter
• Resume
• Last two performance reviews
• Attendance records for current year (Do not include absences covered by paid sick/personal time,
FMLA or other protected absences.)
Pay Range: - $137,000 - $200,000, Bonus and Restricted Stock Unit (RSU) eligible
We offer a comprehensive package of benefits including paid time off, health benefits - medical/dental/vision/hearing aid/pharmacy/behavioral health/employee assistance, health care reimbursement account, dependent care assistance plan, short-term disability and long-term disability insurance, AD&D insurance, life insurance, 401(k), stock purchase plan to eligible employees.
