Cyber Incident Review Team Lead

At Epiq, your work contributes to complex, global legal outcomes. You’ll join a values‑driven community where integrity guides decisions, relentless service sets the bar, and we thrive on big challenges together. We invest in your growth with enterprise‑wide learning and mobility. We celebrate who you are, and we respect life beyond work with flexibility that’s recognized externally. Enabled by modern platforms and AI, you’ll do the most meaningful work of your career and see your impact at scale.

Job Description:

• Lead and mentor a team of Cyber Incident Review Analysts responsible for reviewing completed cyber security investigations.
• Review incident records to ensure investigations are complete, accurate, and aligned with established cyber incident response procedures.
• Validate incident documentation, evidence, timelines, severity classifications, containment actions, and final resolutions.
• Identify inconsistencies, documentation gaps, and process deviations, providing feedback and recommendations for corrective action.
• Monitor review of quality metrics and identify recurring trends, operational risks, and opportunities for continuous improvement.
• Ensure cyber incident reviews comply with organizational policies, regulatory requirements, contractual obligations, and internal governance standards.
• Collaborate with Security Operations Center (SOC), Incident Response, Privacy, Risk, Compliance, and IT teams to resolve review findings and improve operational processes.
• Develop, maintain, and continuously improve review procedures, quality standards, review checklists, and documentation guidelines.
• Support internal audits, external audits, compliance reviews, and regulatory reporting by providing accurate documentation and review evidence.
• Prepare reports and dashboards summarizing review outcomes, quality trends, recurring issues, and operational performance.
• Coach the analysts on review methodologies, documentation quality, investigation standards, and best practices.
• Drive continuous process improvement initiatives to enhance the effectiveness and consistency of cyber incident reviews.

• Minimum 3 years of experience in one or more of the following:
  • Cyber Security Operations
  • Security Operations Center (SOC)
  • Incident Response
  • Cyber Incident Management
  • Cyber Governance
  • Security Compliance
  • Security Quality Assurance
  • Cyber Risk Management
• Prior experience reviewing cyber incidents, security investigations, audit findings, or operational case documentation.
• Experience leading or mentoring analysts in an operational environment.

• Experience working within enterprise cyber security operations.
• Experience supporting regulated industries or compliance-driven environments.
• Familiarity with incident review frameworks, governance processes, and quality assurance methodologies.

• Cyber Incident Review
• Incident Response Lifecycle
• Security Operations
• Incident Documentation
• Quality Assurance
• Cyber Governance
• Information Security
• Risk Assessment
• Root Cause Analysis
• Operational Excellence
• Process Compliance
• Audit Readiness
• Technical Documentation
• Data Analysis
• Critical Thinking
• Analytical Problem Solving
• Team Leadership
• Stakeholder Communication
• Collaboration
• Decision Making
• Coaching and Mentoring

Your specific salary will be determined based on several factors:

• Location-based market rate for the role

• Your abilities in relation to the job specification

• Performance during screening and interview

• Pay parity with the wider team in the considered location

Further details about the package will be provided during the initial screening call with the Talent Acquisition Team.

Click here to learn about Epiq's Benefits.

Epiq Leadership Compass

Fosters Relationships & Collaboration

Builds trust and alignment through open communication, shared goals, and strong partnerships to drive collective success.

• Build trust-based partnerships

• Nurture long-term relationships

• Remove collaboration barriers

• Celebrate cross-team success

Engages & Influences

Inspires action and alignment through clear communication, purposeful influence, and a compelling vision.

• Use storytelling to build buy-in

• Align communication with organizational goals

• Guild alignment through strong engagement

Maximizes Performance

Sets and reinforces performance standards that drive results, ensure accountability, and align with Epiq’s goals.

• Use data to identify improvement opportunities

• Make informed decisions

• Align team goals with boarder strategy

• Empower teams to manage their own goals

• Translate vision into clear priorities

• Prepare for disruptions with strong change management

Achieves Operational Success

Drives continuous improvement and operational excellence through smart processes, data insights, and quality execution.

• Improve workflows for team efficiency

• Use clear documentation and expectations

• Resolve issues quickly using data and feedback

It is Epiq’s policy to comply with all applicable equal employment opportunity laws by making all employment decisions without unlawful regard or consideration of any individual’s race, religion, ethnicity, color, sex, sexual orientation, gender identity or expressions, transgender status, sexual and other reproductive health decisions, marital status, age, national origin, genetic information, ancestry, citizenship, physical or mental disability, veteran or family status or any other basis protected by applicable national, federal, state, provincial or local law. Epiq’s policy prohibits unlawful discrimination based on any of these impermissible bases, as well as any bases or grounds protected by applicable law in each jurisdiction. In addition Epiq will take affirmative action for minorities, women, covered veterans and individuals with disabilities. If you need assistance or an accommodation during the application process because of a disability, it is available upon request. Epiq is pleased to provide such assistance and no applicant will be penalized as a result of such a request.  Pursuant to relevant law, where applicable, Epiq will consider for employment qualified applicants with arrest and conviction records.