Cyber Incident Operations Lead

Reference: 8edj0r475wh1bb6eamjp

We are seeking a Cyber Incident Operations Lead to oversee the detection, response and resolution of cyber security incidents across a complex technology environment. This role will provide operational leadership during high-impact events, coordinate technical and business stakeholders, and ensure incidents are managed efficiently from initial triage through to recovery and closure. You will act as a senior point of escalation, helping to protect critical services, sensitive information and organisational resilience.

Key responsibilities include leading the incident response process, assessing severity and business impact, assigning appropriate response teams, and maintaining clear communication with technical specialists, senior leaders and relevant third parties. You will coordinate investigations into security alerts, suspected breaches, malware, unauthorised access, data loss and other cyber events. The role will also oversee the development and testing of incident response playbooks, improve escalation procedures, track incident metrics, and ensure accurate, timely documentation. Following major incidents, you will lead post-incident reviews, identify root causes, and drive corrective actions to reduce the likelihood and impact of future events.

The successful candidate will have substantial experience in cyber security operations, incident response or a closely related discipline, including hands-on experience managing complex or high-severity incidents. You will be confident working with security monitoring, endpoint detection, identity, network and vulnerability management technologies, and have a strong understanding of threat intelligence and attack techniques. Experience with recognised security frameworks and standards, such as NIST or ISO 27001, is desirable. Strong analytical, communication and decision-making skills are essential, along with the ability to remain calm under pressure, manage competing priorities and influence stakeholders at all levels. Relevant professional certifications in cyber security, incident handling or service management would be advantageous.

£59,000.00 - £74,000.00
Per annum
Added 17/09/2026
Reference: 8edj0r475wh1bb6eamjp

Other similar jobs

Cyber Security Engineer-1

Added 09/10/2026

We are seeking a Cyber Security Engineer-1 to support the protection, monitoring, and continuous improvement of enterprise technology environments. This entry-level role is suited to a security professional who is eager to develop practical experience across infrastructure, applications, networks, and cloud platforms. You will work with experienced security and technology teams to identify risks, investigate alerts, support incident response, and help maintain effective security controls. Key responsibilities include monitoring security events and assisting with the triage, investigation, and documentation of potential incidents. You will support vulnerability assessments, patch verification, configuration reviews, access control checks, and security testing activities. The role...

Learn more

Incident Response Manager, Security Operations Group | Worldwide Operations Security

Added 07/10/2026

We are seeking an experienced Incident Response Manager to lead the coordination, investigation, and resolution of security incidents across a complex, globally distributed operational environment. This role will oversee incident response activities from initial detection and triage through containment, eradication, recovery, and post-incident review. You will work closely with security operations, threat intelligence, cyber investigations, technology, legal, risk, and business teams to protect people, facilities, information, and critical services. Key responsibilities include managing high-severity incidents and serving as an escalation point during active events; establishing incident priorities, response plans, communications, and decision-making processes; directing investigations involving cyber threats, insider risk,...

Learn more

Senior Manager, Associate Director, Cyber Incident Response Advisory and Incident Management

Added 23/10/2026

We are seeking an experienced Senior Manager or Associate Director to lead cyber incident response advisory and incident management activities within a complex, fast-paced environment. This is a high-impact role for a confident cyber security professional who can provide strategic direction while remaining comfortable supporting the management of significant incidents. You will lead the development and continuous improvement of incident response frameworks, playbooks, processes and governance arrangements. Working closely with technology, risk, legal, compliance, communications and business stakeholders, you will ensure the organisation is prepared to identify, contain, investigate and recover from cyber incidents effectively. Key responsibilities will include managing...

Learn more

Senior Manager, Associate Director, Cyber Incident Response Advisory and Incident Management

Added 23/10/2026

We are seeking a Senior Manager, Associate Director, Cyber Incident Response Advisory and Incident Management to lead the development and delivery of effective cyber incident response capabilities. This is a senior role requiring strong technical knowledge, sound judgement and the ability to provide calm, decisive leadership during complex and high-impact security incidents. You will oversee incident response activities from initial triage and investigation through to containment, recovery and post-incident review. Working closely with cyber security, technology, risk, legal, compliance, communications and senior leadership teams, you will coordinate timely responses, establish clear lines of accountability and ensure that key decisions are...

Learn more

Cyber Incident Response Lead

Added 21/10/2026

We are seeking an experienced Cyber Incident Response Lead to direct the investigation, containment and recovery of significant cyber security incidents. This is a hands-on leadership role for an accomplished incident responder who can provide calm, decisive direction during high-pressure situations and strengthen organisational resilience over the long term. You will lead the end-to-end response to security incidents, from initial triage and forensic investigation through to eradication, recovery and post-incident review. You will coordinate technical teams and wider stakeholders, establish response priorities, maintain accurate incident records and provide clear updates to senior leaders. The role will also involve assessing potential...

Learn more

Cyber Incident Lead

Added 14/09/2026

We are seeking an experienced Cyber Incident Lead to oversee the effective identification, management and resolution of cyber security incidents across a complex technology environment. You will lead the incident response function, coordinating activity from initial detection through containment, eradication, recovery and post-incident review. Working closely with security operations, infrastructure, technology, risk, legal and business stakeholders, you will ensure incidents are handled promptly, consistently and with clear communication throughout. Key responsibilities will include assessing and prioritising alerts and incidents, directing investigations, maintaining accurate incident records and providing timely updates to senior stakeholders. You will coordinate technical and business response teams...

Learn more

Cyber Incident Response Lead

Added 09/09/2026

We are seeking an experienced Cyber Incident Response Lead to direct the identification, investigation, containment and recovery of complex cybersecurity incidents. You will provide senior technical leadership throughout the incident lifecycle, coordinating rapid and effective responses to threats affecting systems, networks, applications, cloud environments and sensitive data. The role will involve assessing alerts, validating incidents, determining scope and impact, developing containment strategies, and ensuring that recovery actions are completed safely and efficiently. You will lead incident response activities across multidisciplinary teams, including security operations, infrastructure, engineering, risk, legal, communications and business stakeholders. Responsibilities will include establishing response priorities, allocating resources,...

Learn more

Incident Response Lead

Added 02/11/2026

We are seeking an experienced Incident Response Lead to take ownership of the organisation’s approach to identifying, managing and resolving technology and security incidents. This is a key role in strengthening operational resilience, reducing service disruption and ensuring that incidents are handled consistently, efficiently and with clear accountability. You will lead the response to major and complex incidents, coordinating technical teams, service owners, suppliers and senior stakeholders throughout the incident lifecycle. Responsibilities will include assessing impact and urgency, establishing appropriate response structures, maintaining accurate communications, directing investigation and recovery activities, and ensuring that agreed service levels are met. You will...

Learn more

Disputes & Investigations - Senior Director, Incident Response Lead

Added 26/10/2026

We are seeking an experienced Senior Director to lead incident response activities across a complex, highly regulated environment. This is a senior leadership role responsible for directing the response to significant disputes, investigations, misconduct matters, regulatory concerns and other critical incidents that may affect customers, colleagues, operations or reputation. The successful candidate will establish and oversee a robust incident response framework, ensuring that matters are identified, assessed, escalated and managed consistently. You will lead multidisciplinary response teams, bringing together legal, compliance, risk, security, communications, technology, operations and other relevant specialists. You will provide clear direction during fast-moving and sensitive situations,...

Learn more

Cybersecurity Incident Response Lead

Added 22/09/2026

We are seeking a Cybersecurity Incident Response Lead to coordinate the identification, containment, investigation and resolution of security incidents across a complex technology environment. You will provide technical leadership during high-impact events, ensuring that response activities are structured, timely and aligned with established security and business continuity objectives. The role will work closely with security operations, infrastructure, application, legal, risk, compliance and communications teams to reduce operational impact and protect sensitive information. Responsibilities will include leading incident response investigations from initial triage through recovery and post-incident review; assessing alerts, indicators of compromise and reported threats; directing containment, eradication and remediation...

Learn more

Embedded Senior Operations Officer - Global Security Operations Centre

Added 09/09/2026

We are seeking an experienced Embedded Senior Operations Officer to support the effective delivery of a Global Security Operations Centre (GSOC). This role will provide security monitoring, intelligence analysis and operational coordination in a fast-paced, international environment. You will act as a trusted point of contact for security-related matters, helping to protect people, assets, information and business operations across multiple locations. Key responsibilities will include monitoring global security, safety and threat information; assessing incidents and emerging risks; and producing clear, timely notifications, briefings and situation reports. You will manage and escalate incidents in accordance with established procedures, coordinate responses with...

Learn more

CIM - Cyber Incident Manager

Added 03/11/2026

We are seeking a skilled CIM – Cyber Incident Manager to lead the effective response to cyber security incidents and help protect critical systems, services and information. This is an opportunity to join a collaborative security function where you will coordinate activity across technical teams, business stakeholders and external partners during high-impact events. You will manage the full incident lifecycle, from initial triage and classification through containment, eradication, recovery and post-incident review. Responsibilities will include assessing alerts and reported incidents, establishing appropriate response teams, maintaining accurate incident records, and ensuring timely, clear communication to stakeholders. You will also provide regular...

Learn more

Cyber Incident Manager

Added 30/10/2026

We are seeking an experienced Cyber Incident Manager to lead the effective response to cyber security incidents across a complex and fast-paced environment. You will play a key role in protecting critical systems, services and information by coordinating incident response activity from initial detection through to resolution and recovery. You will manage the incident response lifecycle, ensuring that incidents are assessed, prioritised, contained and resolved in line with established procedures and service levels. Working closely with security operations, infrastructure, applications, risk, legal, communications and business teams, you will provide clear direction during high-severity incidents and ensure that appropriate stakeholders remain...

Learn more

Consultant, Senior Consultant, Cyber Incident Response Advisory, Recovery and Resilience

Added 26/10/2026

We are seeking experienced professionals to join a Cyber Incident Response Advisory, Recovery and Resilience team at Consultant and Senior Consultant level. This is an opportunity to support clients in preparing for, responding to and recovering from complex cyber incidents, while helping them strengthen their long-term resilience. You will work with organisations across a range of sectors to assess their cyber incident response capabilities, identify vulnerabilities and develop practical strategies for managing disruption. Responsibilities may include supporting incident response engagements, conducting readiness assessments, reviewing crisis management arrangements and contributing to post-incident lessons-learned reviews. You will also help clients develop and...

Learn more

Consultant, Senior Consultant, Cyber Incident Response Advisory, Recovery and Resilience

Added 26/10/2026

We are seeking experienced professionals to join a cyber incident response advisory, recovery and resilience team. Opportunities are available at Consultant and Senior Consultant level for individuals who can help clients prepare for, respond to and recover from significant cyber security incidents. You will work with a broad range of stakeholders, supporting organisations in strengthening their ability to withstand disruption and maintain critical services. You will contribute to incident response engagements, including assessing the impact of cyber attacks, supporting containment and recovery activities, coordinating technical and business workstreams, and helping clients return to normal operations. You will also assist with...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.