Staff Security Incident Commander

Job Description
About Digital Technology:
We’re not yesterday’s IT department, we're Digital Technology. The world around us keeps changing and so do we. We’re redefining what it means to be IT with a mindset centered on transformation, experience, AI-driven automation, innovation, and growth.
We’re all about delivering delightful, secure customer and employee experiences that accelerate ServiceNow’s journey to become the defining enterprise software company of the 21st century. And we love co-creating, using, and highlighting our own products to do it.
Ultimately, we strive to make the world work better for our employees and customers when you work in ServiceNow Digital Technology, you work for them.
The ServiceNow Security Organization delivers world-class, innovative security solutions to reduce risk and protect the company and our customers. We enable our customers to migrate their most sensitive data and workloads to the cloud, accelerating our business so that we are the most trusted SaaS provider. We create an environment where our employees are proud to work and can make a positive impact.
ServiceNow's Global Incident Response (GIR) team is responsible for SOC and DFIR services across our global production, datacenter, corporate, application, and cloud environments. We are actively growing our cybersecurity crisis response function, Incident Command.
Responsibilities:
As an Incident Commander, you will lead incident strategy and communication, driving rapid response, investigation, and mitigation of ServiceNow's most severe security events impacting the company and our customers.
You will serve as a primary point of contact throughout the incident response lifecycle for diverse teams across the planet. During crises you will produce clear status reports and orchestrate bridges to keep all stakeholders actively involved. This role requires interacting directly with executives and other business leaders, equipping them with critical information required for swift decision-making.
High severity incidents often involve ambiguity and need creative approaches and solutions to manage unprecedented problems. Flexibility, fast movement, and the ability to reduce complex situations to individual components to allow action are critical.
When not handling active crises, you will continuously improve GIR and Command documentation, processes, and supporting infrastructure to maintain Command readiness. You will be instrumental in designing and executing tabletop exercises to ensure all stakeholders understand and can execute their roles and responsibilities during a crisis.