Cyber Response & Recovery Assistant Manager (Reactive DFIR)

Reference: 6gsgy4fa99q2e41wl0k7

We are seeking a Cyber Response & Recovery Assistant Manager specialising in Reactive Digital Forensics and Incident Response (DFIR). This role will support the delivery of high-quality technical investigations and coordinated response activities following cyber incidents, helping clients understand what happened, contain threats, recover securely and strengthen their resilience. You will work across a varied caseload, including malware outbreaks, ransomware, data breaches, insider activity, business email compromise and other suspected security events.

Key responsibilities will include leading or supporting end-to-end incident response engagements; collecting, preserving and analysing digital evidence from endpoints, servers, cloud environments, networks and mobile devices; developing investigative timelines; identifying attack vectors, persistence mechanisms and indicators of compromise; and preparing clear technical and executive-level reports. You will assist with scoping incidents, managing priorities, maintaining accurate case records and presenting findings to stakeholders. The role will also involve mentoring junior team members, reviewing investigative outputs, contributing to post-incident reviews and helping improve response playbooks, forensic procedures and recovery processes. Participation in an on-call or out-of-hours response rota may be required.

Applicants should have practical experience in digital forensics, incident response, cyber investigations or a closely related discipline, with a strong understanding of enterprise infrastructure, Windows and Linux systems, networking, identity services, cloud platforms and common attack techniques. Familiarity with forensic and response tooling, evidence handling, threat intelligence, malware analysis or scripting with Python or PowerShell would be advantageous. Relevant professional certifications, such as GCFA, GCIH, GNFA, GCFE, EnCE, CREST or equivalent, are desirable but not essential. You will need excellent analytical, written and verbal communication skills, sound judgement under pressure, strong attention to detail and the ability to explain complex technical issues to both technical and non-technical audiences. A professional, collaborative approach and willingness to support continuous learning are essential.

COMPETITIVE SALARY
Added 02/09/2026
Reference: 6gsgy4fa99q2e41wl0k7

Cyber Response & Recovery Assistant Manager (Reactive DFIR)

London, England, United Kingdom Permanent Incident Response

Other similar jobs

Cyber Response & Recovery Manager (Reactive DFIR) - German Speaking

Added 02/09/2026

We are seeking a Cyber Response & Recovery Manager specialising in reactive digital forensics and incident response (DFIR) to lead the investigation and containment of complex cyber incidents. This role will manage response activities from initial triage through eradication, recovery and post-incident review, helping organisations restore secure operations while preserving critical evidence. The successful candidate will be fluent in German and English and confident working with stakeholders across technical, operational and executive levels in high-pressure situations. You will coordinate incident response engagements, establish priorities, allocate technical resources and maintain clear communication throughout each phase of an investigation. Responsibilities will include...

Learn more

Cyber Response and Recovery - Assistant Manager (Reactive)

Added 18/08/2026

We are seeking an enthusiastic and skilled Cyber Response and Recovery - Assistant Manager (Reactive) to join our dynamic team. In this role, you will be responsible for leading incident response efforts during cyber incidents, ensuring that all incidents are efficiently managed and that recovery processes are executed effectively. You will collaborate with cross-functional teams to analyze and respond to cyber threats, while also developing and implementing incident response plans that align with industry best practices. Your proactive approach will help minimize impact and restore services swiftly during security breaches. The ideal candidate will possess strong analytical and problem-solving skills,...

Learn more

Cyber Response and Recovery - Assistant Manager (Proactive)

Added 26/08/2026

We are seeking a Cyber Response and Recovery – Assistant Manager (Proactive) to strengthen organisational resilience against cyber threats. This role will focus on preparing for, preventing and reducing the impact of cyber incidents through effective planning, testing and continuous improvement. You will work closely with cybersecurity, technology, risk, compliance, business continuity and operational teams to ensure the organisation is ready to respond to disruption and recover critical services safely and efficiently. Key responsibilities will include developing and maintaining cyber incident response, recovery and crisis management plans; coordinating tabletop exercises, simulations and technical recovery tests; documenting lessons learned and tracking...

Learn more

Cyber Response & Recovery Manager (Remediation)

Added 02/09/2026

We are seeking an experienced Cyber Response & Recovery Manager (Remediation) to lead the coordination, delivery and assurance of remediation activities following cyber incidents, security assessments and control failures. The successful candidate will work across technology, risk, operations and business teams to ensure identified weaknesses are addressed promptly, sustainably and in line with regulatory, risk and security requirements. This role will help strengthen organisational resilience by turning incident findings and lessons learned into measurable improvements. Key responsibilities include owning and maintaining remediation plans, coordinating actions across multiple stakeholders, and tracking progress against agreed milestones, risk tolerances and deadlines. You will...

Learn more

Cyber Response Assistant Manager (Proactive Consulting)

Added 02/09/2026

We are seeking a Cyber Response Assistant Manager to support the delivery of proactive cyber security consulting services across a diverse range of clients and environments. This role will help organisations identify, assess and reduce cyber risk before incidents occur, while also contributing to their readiness to respond effectively when threats emerge. You will work closely with senior consultants, technical specialists and client stakeholders to deliver practical, risk-based advice aligned with business objectives, regulatory expectations and recognised security frameworks. Your responsibilities will include supporting cyber maturity assessments, incident response readiness reviews, threat and vulnerability assessments, tabletop exercises, security control evaluations...

Learn more

Assistant Manager - Cyber and Digital Health

Added 25/08/2026

We are seeking an Assistant Manager – Cyber and Digital Health to support the delivery of secure, effective and innovative digital services across a complex health environment. This role will contribute to the development and implementation of cyber security, information governance and digital health initiatives, helping to protect sensitive information while enabling high-quality care and efficient service delivery. You will assist with cyber risk assessments, security assurance activities, incident response, vulnerability management and compliance monitoring. Working with clinical, operational, technical and external stakeholders, you will help translate security requirements into practical controls and support the delivery of projects involving digital...

Learn more

Assistant Manager - Cyber and Digital Health

Added 28/07/2026

We are seeking a motivated and detail-oriented Assistant Manager - Cyber and Digital Health to join our dynamic team. In this role, you will be responsible for supporting the development and implementation of cyber and digital health strategies that enhance the security and efficiency of health information systems. Your primary duties will include conducting risk assessments, managing cybersecurity protocols, and ensuring compliance with relevant regulations and standards in the healthcare sector. You will collaborate with cross-functional teams to identify vulnerabilities, recommend solutions, and facilitate training sessions on best practices in cybersecurity. Additionally, the Assistant Manager will assist in the evaluation...

Learn more

Assistant Manager (Adoption), Cyber and Digital Health

Added 28/07/2026

We are seeking a dedicated and motivated Assistant Manager (Adoption) to join our dynamic team in the Cyber and Digital Health sector. In this role, you will be responsible for driving the adoption of innovative digital health solutions and ensuring their successful integration into healthcare practices. You will work closely with stakeholders, including healthcare professionals and technology teams, to enhance user experience and promote the benefits of digital health initiatives. Your key responsibilities will include developing and implementing strategies to increase user engagement, conducting training sessions, and providing ongoing support to ensure effective utilization of digital health tools. The ideal...

Learn more

Senior Manager, Global Cyber Security Incident Response (Global CSIRT)

Added 18/09/2026

We are seeking a Senior Manager, Global Cyber Security Incident Response to lead and evolve a global incident response capability. This role will be responsible for directing the identification, containment, investigation and recovery of significant cyber security incidents across a complex, international environment. You will provide calm, decisive leadership during high-impact events, coordinate technical and business stakeholders, and ensure that response activities protect critical services, data and customer trust. The role will also contribute to the development of a mature, intelligence-led and continuously improving Global CSIRT function. Key responsibilities include leading incident response teams and third-party partners through suspected and...

Learn more

Cyber Digital Health Senior Manager

Added 04/08/2026

We are seeking a highly skilled Cyber Digital Health Senior Manager to lead our initiatives in enhancing digital health solutions while ensuring robust cybersecurity measures. The successful candidate will oversee the development, implementation, and maintenance of digital health technologies, ensuring compliance with regulatory standards and best practices. This role involves collaborating with cross-functional teams to identify opportunities for digital transformation, driving innovation in health technology, and managing vendor relationships to enhance service delivery. The ideal candidate will possess extensive experience in the healthcare sector, particularly in cyber risk management and digital health strategies. Key responsibilities include conducting risk assessments, developing...

Learn more

Director - Healthcare - Cyber Security

Added 01/09/2026

We are seeking an experienced Director of Cyber Security to lead the development and delivery of a comprehensive security strategy within a complex healthcare environment. This senior leadership role will protect sensitive clinical, operational and personal information while enabling safe, reliable and digitally driven care. You will provide strategic direction across cyber security, information assurance, risk management, resilience and regulatory compliance, ensuring that security remains aligned with organisational priorities and patient safety. Key responsibilities will include establishing and maintaining the cyber security roadmap; overseeing security operations, threat monitoring, vulnerability management, incident response and identity and access controls; and strengthening governance,...

Learn more

KDN Director - Cyber Solutions Architecture

Added 26/08/2026

We are seeking a Director of Cyber Solutions Architecture to lead the design and delivery of innovative, secure, and scalable cybersecurity solutions for complex client environments. In this senior role, you will provide strategic direction across security architecture, cloud security, identity and access management, data protection, threat detection, incident response, and risk management. You will work closely with senior stakeholders to understand business objectives, translate requirements into practical technology strategies, and develop target operating models and transformation roadmaps. You will lead architecture engagements from initial discovery through to solution delivery, ensuring that proposed designs are commercially viable, technically robust, and...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.