Leads cyber incident response engagements from triage through containment, recovery, and lessons learned. Advises clients during active incidents, coordinates forensic analysis and threat hunting, directs technical teams across cloud, network, endpoint, and identity environments, and develops response plans, playbooks, and tabletop exercises. Translates technical findings into executive communications, guides remediation and resilience improvements, and coaches cybersecurity professionals.
The Opportunity
As a Cyber Defense & Resilience - Incident Response - Senior Manager you will lead incident response efforts, guide remediation activities, and help clients respond to cyber threats across complex environments within our Cybersecurity practice. As a Senior Manager you will use sound judgment, strategic thinking, and advanced communication skills to direct large workstreams, coach teams through ambiguity, and shape clear client messages that connect technical findings to business impact. In this role at PwC, you will contribute to threat containment, recovery planning, and resilience improvements while collaborating across cybersecurity incident management, advanced technologies, and security strategy to support client systems and data.
Responsibilities
- Leading cyber incident response engagements from initial triage through containment, recovery, and lessons learned activities
- Advising client stakeholders on incident handling priorities, escalation paths, and response decisions during active events
- Coordinating forensic analysis, threat hunting, and log review to identify scope, root cause, and attack methods
- Developing incident response plans, playbooks, and tabletop exercise scenarios that strengthen enterprise resilience
- Directing technical teams through complex investigations and remediation efforts across cloud, network, endpoint, and identity environments
- Translating findings into clear briefings, executive updates, and post incident reports for business and technology leaders
- Applying cybersecurity governance, threat intelligence, and risk management knowledge to guide remediation strategies
- Reviewing detection gaps and control weaknesses to shape recovery actions and reduce exposure to future attacks
- Coaching team members on incident management methods, technical communication, and coordinated response execution
- Supporting client readiness activities by refining response procedures, simulation materials, and resilience planning approaches
What You Must Have
- At least a Bachelor's degree
- At least 7 years of experience
What Sets You Apart
- Preference for at least one of the following fields of study: Business Administration/Management, Computer and Information Science, Information CyberSecurity, Information Technology, Management Information Systems, Computer Applications, Computer Engineering
- Demonstrating incident response leadership across complex cyber events
- Applying incident recovery planning and resilience program development
- Crafting client-facing messaging for technical crisis situations
- Directing teams through ambiguity with sound judgment
- Coaching diverse teams through response and remediation activities
- Modeling cyber standards, code of conduct, and independence requirements
The salary range for this position is: $124,000 - $280,000. Actual compensation within the range will be dependent upon the individual's skills, experience, qualifications and location, and applicable employment laws. All hired individuals are eligible for an annual discretionary bonus. PwC offers a wide range of benefits, including medical, dental, vision, 401k, holiday pay, vacation, personal and family sick leave, and more. To view our benefits at a glance, please visit the following link: https://pwc.to/benefits-at-a-glance
As PwC is an equal opportunity employer, all qualified applicants will receive consideration for employment at PwC without regard to race; color; religion; national origin; sex (including pregnancy, sexual orientation, and gender identity); age; disability; genetic information (including family medical history); veteran, marital, or citizenship status; or, any other status protected by law.
PwC does not intend to hire experienced or entry level job seekers who will need, now or in the future, PwC sponsorship through the H-1B lottery, except as set forth within the following policy: https://pwc.to/H-1B-Lottery-Policy.
Learn more about how we work: https://pwc.to/how-we-work
For only those qualified applicants that are impacted by the Los Angeles County Fair Chance Ordinance for Employers, the Los Angeles' Fair Chance Initiative for Hiring Ordinance, the San Francisco Fair Chance Ordinance, San Diego County Fair Chance Ordinance, and the California Fair Chance Act, where applicable, arrest or conviction records will be considered for Employment in accordance with these laws. At PwC, we recognize that conviction records may have a direct, adverse, and negative relationship to responsibilities such as accessing sensitive company or customer information, handling proprietary assets, or collaborating closely with team members. We evaluate these factors thoughtfully to establish a secure and trusted workplace for all.
As a Cyber Defense & Resilience - Incident Response - Senior Manager you will lead incident response efforts, guide remediation activities, and help clients respond to cyber threats across complex environments within our Cybersecurity practice. As a Senior Manager you will use sound judgment, strategic thinking, and advanced communication skills to direct large workstreams, coach teams through ambiguity, and shape clear client messages that connect technical findings to business impact. In this role at PwC, you will contribute to threat containment, recovery planning, and resilience improvements while collaborating across cybersecurity incident management, advanced technologies, and security strategy to support client systems and data.
Responsibilities
- Leading cyber incident response engagements from initial triage through containment, recovery, and lessons learned activities
- Advising client stakeholders on incident handling priorities, escalation paths, and response decisions during active events
- Coordinating forensic analysis, threat hunting, and log review to identify scope, root cause, and attack methods
- Developing incident response plans, playbooks, and tabletop exercise scenarios that strengthen enterprise resilience
- Directing technical teams through complex investigations and remediation efforts across cloud, network, endpoint, and identity environments
- Translating findings into clear briefings, executive updates, and post incident reports for business and technology leaders
- Applying cybersecurity governance, threat intelligence, and risk management knowledge to guide remediation strategies
- Reviewing detection gaps and control weaknesses to shape recovery actions and reduce exposure to future attacks
- Coaching team members on incident management methods, technical communication, and coordinated response execution
- Supporting client readiness activities by refining response procedures, simulation materials, and resilience planning approaches
What You Must Have
- At least a Bachelor's degree
- At least 7 years of experience
What Sets You Apart
- Preference for at least one of the following fields of study: Business Administration/Management, Computer and Information Science, Information CyberSecurity, Information Technology, Management Information Systems, Computer Applications, Computer Engineering
- Demonstrating incident response leadership across complex cyber events
- Applying incident recovery planning and resilience program development
- Crafting client-facing messaging for technical crisis situations
- Directing teams through ambiguity with sound judgment
- Coaching diverse teams through response and remediation activities
- Modeling cyber standards, code of conduct, and independence requirements
The salary range for this position is: $124,000 - $280,000. Actual compensation within the range will be dependent upon the individual's skills, experience, qualifications and location, and applicable employment laws. All hired individuals are eligible for an annual discretionary bonus. PwC offers a wide range of benefits, including medical, dental, vision, 401k, holiday pay, vacation, personal and family sick leave, and more. To view our benefits at a glance, please visit the following link: https://pwc.to/benefits-at-a-glance
As PwC is an equal opportunity employer, all qualified applicants will receive consideration for employment at PwC without regard to race; color; religion; national origin; sex (including pregnancy, sexual orientation, and gender identity); age; disability; genetic information (including family medical history); veteran, marital, or citizenship status; or, any other status protected by law.
PwC does not intend to hire experienced or entry level job seekers who will need, now or in the future, PwC sponsorship through the H-1B lottery, except as set forth within the following policy: https://pwc.to/H-1B-Lottery-Policy.
Learn more about how we work: https://pwc.to/how-we-work
For only those qualified applicants that are impacted by the Los Angeles County Fair Chance Ordinance for Employers, the Los Angeles' Fair Chance Initiative for Hiring Ordinance, the San Francisco Fair Chance Ordinance, San Diego County Fair Chance Ordinance, and the California Fair Chance Act, where applicable, arrest or conviction records will be considered for Employment in accordance with these laws. At PwC, we recognize that conviction records may have a direct, adverse, and negative relationship to responsibilities such as accessing sensitive company or customer information, handling proprietary assets, or collaborating closely with team members. We evaluate these factors thoughtfully to establish a secure and trusted workplace for all.
PwC Chicago, Illinois, USA Office
One North Wacker Drive, Chicago, IL, United States, 60606
PwC Chicago, Illinois, USA Office
330 North Wabash Avenue, Suite 3950, Chicago, IL, United States, 60611
PwC Rosemont, Illinois, USA Office
9399 West Higgins Road Suite 900, Rosemont, IL, United States, 60018
Similar Jobs at PwC
Artificial Intelligence • Professional Services • Business Intelligence • Consulting • Cybersecurity • Generative AI
Leads operational due diligence workstreams for consumer markets transactions, evaluating operating models, performance, processes, risks, and value drivers. Manages project timelines, budgets, deliverables, and client relationships; analyzes financial statements, market trends, and scenarios; develops acquisition and integration insights; reviews team work; coaches junior staff; and applies digital and AI-enabled tools to improve diligence delivery.
Top Skills:
Artificial Intelligence
Artificial Intelligence • Professional Services • Business Intelligence • Consulting • Cybersecurity • Generative AI
Lead healthcare provider clinical operations consulting workstreams focused on workflow redesign, patient access, utilization, capacity, service line performance, and technology integration. Analyze operational data, develop recommendations, coordinate engagement activities, manage deliverables, build client relationships, support Epic and Cerner implementations, and mentor junior team members.
Top Skills:
CernerEpic
Artificial Intelligence • Professional Services • Business Intelligence • Consulting • Cybersecurity • Generative AI
Supports healthcare provider technology consulting engagements by analyzing business processes, assisting with application implementation and testing, validating data flows, documenting issues, preparing training materials, and helping clients improve revenue cycle, scheduling, administrative, and workforce operations.
What you need to know about the Chicago Tech Scene
With vibrant neighborhoods, great food and more affordable housing than either coast, Chicago might be the most liveable major tech hub. It is the birthplace of modern commodities and futures trading, a national hub for logistics and commerce, and home to the American Medical Association and the American Bar Association. This diverse blend of industry influences has helped Chicago emerge as a major player in verticals like fintech, biotechnology, legal tech, e-commerce and logistics technology. It’s also a major hiring center for tech companies on both coasts.
Key Facts About Chicago Tech
- Number of Tech Workers: 245,800; 5.2% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: McDonald’s, John Deere, Boeing, Morningstar
- Key Industries: Artificial intelligence, biotechnology, fintech, software, logistics technology
- Funding Landscape: $2.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Pritzker Group Venture Capital, Arch Venture Partners, MATH Venture Partners, Jump Capital, Hyde Park Venture Partners
- Research Centers and Universities: Northwestern University, University of Chicago, University of Illinois Urbana-Champaign, Illinois Institute of Technology, Argonne National Laboratory, Fermi National Accelerator Laboratory

