Lead and operate enterprise cyber response and crisis management activities, develop and test incident response playbooks and SOPs, coordinate cross-functional incident response and state-specific teams, run training and exercises, analyze incidents and after-action reports, and improve response tools, metrics, and compliance.
JOB DESCRIPTION
Job Summary
Provides subject matter expertise and leadership for the day-to-day delivery of Molina enterprise cyber response/crisis management program activities. Partners closely with information technology (IT) security, business continuity, disaster response, and the Protection Services Operations Center (PSOC) team to ensure appropriate engagement and escalation protocols are in place to support business and technology incidents. Demonstrates leadership during an enterprise-wide cyber crisis event, and conducts incident after action reviews to identify strengths, improvement opportunities and track corrective actions. Provides consultation on the design, development and deployment of scalable cyber response and crisis management solutions, tools and capabilities that align to the company’s goals and effectively address business objectives and requirements.
Essential Job Duties
- Drives commitment, support, ownership, accountability and results for cyber response, incident response, and crisis management activities.
- Assists with cyber response/incident management program and process documentation including policies, procedures, frameworks, templates, and creates instructions in support of the program and meeting regulatory requirements.
- Assists with documenting the standard operating procedures (SOPs), incident response playbooks, escalation protocols, etc. to facilitate response capabilities.
- Validates, tests, and identifies gaps in response strategies and communicates results to leadership.
- Reviews and provides input on select enterprise response systems, tools, and services to ensure effective planning, testing and response capabilities including out of band options.
- Conducts research and analysis to support cyber/incident response programs and projects.
- Develops and conducts employee incident response training to create awareness for areas of responsibility.
- Supports enterprise threat and cyber crisis response activities including incident notifications and situational updates, employee emergency notifications, threat monitoring and analysis, notification of threat to appropriate stakeholders, cyber incident response team meeting coordination and minutes, state-specific incident response leadership, and support for impacted business operations.
- Prepares comprehensive, timely, and detailed response after-action reports.
- Analyzes trends across incidents and exercises to recommend improvements that may not be apparent from looking at each incident or exercise in isolation.
- Periodically tests and ensures readiness of continuity tools, including tools for out-of-band notification or incident communications.
- Establishes and maintains communication with enterprise crisis management, incident response team, and state-specific response team members.
- Coordinates with cyber response teams, the Chief Information Security Officer (CISO), legal, privacy, and the Protection Services Operations Center (PSOC) to respond to and support cyber crisis situations.
- Develops, enhances, and improves enterprise crisis management, cyber response while supporting incident plans and state-specific response plans; ensures annual plan compliance requirements are achieved.
- Assists in development of metrics and measurements supporting response programs evolution, validation, and business awareness.
- Implements processes, procedures and systems that will help ensure that the company’s continuity capabilities remain in compliance with all laws, regulations, and best practices.
- Assists in the evaluation, design and deployment of integrated systems and technology that support response, intelligence, service delivery, and organizational strategy.
- Maintains roster of cyber crisis management and incident response team members.
Conducts annual training of all crisis management and incident response plans as changes are made to each location team; prepares comprehensive, timely, and detailed test reports. - Maintains lessons learned and remediation tracker; ensures response items requiring remediation are resolved within a timely manner.
Required Qualifications
- At least 7 years of operational experience across multiple cybersecurity disciplines and crisis management, including at least 3 years of corporate business experience in cyber response, incident response, crisis management, and/or disaster recovery, or equivalent combination of relevant education and experience.
- Experience conducting risk assessments, business processes, or control auditing.
- Strong documentation skills, including detailed tracking, executive briefing, and reporting skills.
- Practical understanding of technical/security concepts including network architecture design, logical access controls, vulnerability management, encryption, and cloud computing.
- Strong problem-solving and analytical abilities, including the ability to critically evaluate information gathered from multiple sources, reconcile conflicts, decompose high-level information into details, and apply sound business knowledge.
- Strong organizational skills, self-starter, and ability to multitask and manage multiple projects, and maintain attention to detail.
- Strong team player, and ability to build and maintain customer relationships and work collaboratively with team members - some of which may be geographically distributed.
- Demonstrated focus on process development and implementation that spans organizational boundaries.
- Data analysis experience, and ability to create value added metrics/reporting.
- Strong grasp and hands-on experience in cyber incident response, disaster response, and crisis management.
- Strong understanding of cyber response and recovery stages, and the fundamentals of incident response planning, testing, and exercises.
- Situational awareness, and ability to respond to incidents that pose a threat to company, property, data, or people.
- Risk management and cyber response software/systems experience.
- Familiarity with cyber trends – ransomware, malware, phishing, insider threat, etc.
- Familiarity using ChatGPT and CoPilot, and using AI for research.
- Familiarity with industry best practices and standards for cyber and crisis events.
- Strong project management experience/skills.
- Strong verbal and written communication skills, and ability to present information to internal/external stakeholders.
- Microsoft Office suite and applicable software program(s) proficiency.
Preferred Qualifications
- Deep experience with cybersecurity/crisis management industry standard tools and concepts.
- Business Continuity Institute (BCI) and/or Disaster Recovery Institute International (DRII) certification.
- Certified Information Systems Auditor (CISA) and/or Certified Information Systems Security Professional (CISSP).
To all current Molina employees: If you are interested in applying for this position, please apply through the Internal Job Board.
Molina Healthcare offers a competitive benefits and compensation package. Molina Healthcare is an Equal Opportunity Employer (EOE) M/F/D/V
Molina Healthcare offers a competitive benefits and compensation package. Molina Healthcare is an Equal Opportunity Employer (EOE) M/F/D/V
Similar Jobs
.png)
Cloud • Insurance • Payments • Software • Business Intelligence • App development • Big Data Analytics
As a Software Development Engineer in Test, you'll create and conduct automated tests, resolve technical issues, and collaborate with development teams to ensure software quality.
Top Skills:
AWSAzureCloud ComputingDockerGCPGqlKubernetesObject-Oriented ProgrammingPlaywrightSQL
Cloud • Insurance • Payments • Software • Business Intelligence • App development • Big Data Analytics
Lead a new data engineering team to define standards, drive cross-functional AI-driven initiatives, and provide hands-on guidance in SQL optimization, data modeling, and the GCP data/streaming stack. Balance technical leadership with people management, coach engineers, promote AI-assisted workflows, and collaborate with Product and Architecture to build a standardized data ecosystem.
Top Skills:
Ai-Assisted Engineering WorkflowsApache BeamBigQueryCloud SqlDatadogGitlab Ci/CdGkeGoGoogle Cloud DataflowPostgresPub/SubPythonRedisSnowflakeSQLTerraform Cdk
Cloud • Insurance • Payments • Software • Business Intelligence • App development • Big Data Analytics
The Recruiting Operations Lead will design and oversee the recruitment process, lead ATS migration, manage recruiting metrics, and partner cross-functionally to enhance hiring efficiency and quality.
Top Skills:
Ats
What you need to know about the San Francisco Tech Scene
San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.
Key Facts About San Francisco Tech
- Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Google, Apple, Salesforce, Meta
- Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
- Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
- Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine
