Corporate Vice President, Cyber Security Incident Management (CSIR) Lead

Job Description

Corporate Vice President – Cybersecurity Incident Response Lead | New York Life Insurance Company

The Tone:
This is a full-time role at New York Life Insurance Company, located in Hybrid – New York, New York, USA. Within the Technology, Data, AI, and Ventures (TDAV) organization, the company builds solutions to power how it serves policy owners, agents, advisors, and employees, while delivering measurable business outcomes. This role is critical as it establishes unified ownership and leadership for the enterprise cyber incident response capability, safeguarding the company and its stakeholders from cyber threats. The position is accountable for enterprise-wide cyber incident response from activation through secure recovery and post-incident improvement.

The TL;DR
• Role: Full Time
• Location: Hybrid – New York, New York, USA
• Pay: $185000–$264500 yearly
• Team: Cybersecurity Incident Response function, reporting to the Chief Information Security Officer (CISO)
• Mission: Lead New York Life’s enterprise cyber incident response capability, ensuring robust command, coordination, and recovery from all cyber incidents.
• Tech Stack: NIST SP 800-61, NIST Cybersecurity Framework, MITRE ATT&CK, incident management platforms, case management tooling, security orchestration and automation

What You’ll Actually Do
• Lead Enterprise Incident Response: Act as the enterprise Incident Commander, owning incident declaration, classification, escalation, and directing cross-functional response from activation through secure recovery.
• Manage IR Team & Strategy: Build, develop, and lead the dedicated Cyber Incident Response function, establishing its roadmap, operating priorities, talent strategy, and readiness objectives.
• Govern Incident Program: Own the cybersecurity incident management standard, response plan, playbooks, and supporting procedures, ensuring alignment with NIST frameworks and regulatory requirements.
• Ensure Regulatory Compliance: Partner with legal, privacy, and compliance functions to assess notification obligations, track deadlines, and support timely, accurate regulatory filings.
• Coordinate Stakeholder Communications: Serve as the primary point of coordination during incidents, preparing and delivering briefings to cybersecurity leadership, senior executives, and risk partners.

The Must-Haves
• Background: Bachelor’s degree required or equivalent work experience, with a focus on leading cybersecurity incident response within a large enterprise.
• Experience: Eight or more years of cybersecurity or technology experience, including four or more years in incident response or incident management, with prior direct team leadership experience and demonstrated experience serving as Incident Commander for high-severity, cross-functional cybersecurity incidents. Prior experience in a regulated financial services, insurance, or similarly complex enterprise environment is preferred.
• Skills: Demonstrated technical depth in cybersecurity incident response, working command of NIST SP 800-61 and the NIST Cybersecurity Framework, experience with regulatory and breach-notification requirements applicable to financial services, and experience preparing executive-facing incident communications and reporting.
• Bonus: Cyber security certification preferred, such as GCIH, GCFA, GCFE, CISSP, CISM, CRISC, or similar designation, and experience with incident management platforms, case management tooling, and security orchestration and automation.