Senior Manager, Global Cyber Security Incident Response (Global CSIRT)

Reference: s61nmoaiyiouhmxy79z8

We are seeking a Senior Manager, Global Cyber Security Incident Response to lead and evolve a global incident response capability. This role will be responsible for directing the identification, containment, investigation and recovery of significant cyber security incidents across a complex, international environment. You will provide calm, decisive leadership during high-impact events, coordinate technical and business stakeholders, and ensure that response activities protect critical services, data and customer trust. The role will also contribute to the development of a mature, intelligence-led and continuously improving Global CSIRT function.

Key responsibilities include leading incident response teams and third-party partners through suspected and confirmed security incidents; establishing incident command, escalation and communications processes; and ensuring timely reporting to senior leadership and relevant stakeholders. You will oversee forensic investigations, threat hunting, malware analysis, vulnerability-driven response and post-incident reviews, translating technical findings into clear business risks and practical remediation plans. You will develop and maintain global playbooks, operating procedures, service metrics and readiness plans, while coordinating cyber exercises, simulations and lessons-learned activities. The position will work closely with security operations, technology, risk, legal, privacy, communications and business continuity teams to strengthen resilience and regulatory preparedness.

The successful candidate will bring substantial experience leading cyber security incident response, digital forensics or security operations within a large, distributed organisation. You will have strong knowledge of incident management frameworks, attack techniques, threat intelligence, cloud environments, identity security, network technologies and relevant security tooling. Experience managing high-severity incidents, influencing senior stakeholders and leading geographically dispersed teams is essential. Professional certifications such as CISSP, GCIH, GCFA, CISM or equivalent are desirable. We are looking for an inclusive and collaborative leader with excellent communication skills, sound judgement, strong analytical ability and the confidence to make informed decisions under pressure. The role may require participation in an on-call or out-of-hours escalation rota.

COMPETITIVE SALARY
Added 18/09/2026
Reference: s61nmoaiyiouhmxy79z8

Senior Manager, Global Cyber Security Incident Response (Global CSIRT)

London, England, United Kingdom Permanent Incident Response

Other similar jobs

Security Incident Response Manager

Added 23/09/2026

We are seeking an experienced Security Incident Response Manager to lead the detection, investigation, containment, and recovery of cybersecurity incidents across a complex technology environment. In this role, you will manage the incident response function, coordinate activity across security operations, infrastructure, engineering, legal, privacy, communications, and business teams, and ensure that incidents are handled efficiently and consistently. You will establish clear escalation procedures, define incident severity criteria, and provide calm, decisive leadership during high-impact events. Key responsibilities include overseeing the full incident lifecycle, from initial triage and forensic investigation through remediation, recovery, and post-incident review. You will maintain and improve...

Learn more

Senior Security Incident Response Analyst

Added 23/09/2026

We are seeking a Senior Security Incident Response Analyst to lead the investigation, containment, and resolution of complex cybersecurity incidents across a diverse technology environment. In this role, you will monitor and analyse security alerts, coordinate rapid responses to suspected breaches, and provide expert guidance throughout the incident lifecycle. You will work closely with security operations, infrastructure, engineering, legal, risk, and business teams to assess impact, minimise disruption, and restore secure operations. Your responsibilities will include developing and refining incident response procedures, conducting detailed analysis of endpoint, network, identity, cloud, and application data, and performing forensic investigations to determine attack...

Learn more

Cyber Security Engineer, (Cloud Security Specialist)

Added 07/10/2026

We are seeking a Cyber Security Engineer, (Cloud Security Specialist) to help protect cloud environments, applications, infrastructure and data against evolving cyber threats. This role will contribute to the design, implementation and continuous improvement of secure cloud services across platforms such as Microsoft Azure, Amazon Web Services or Google Cloud. You will work closely with infrastructure, engineering, architecture, development and risk teams to embed security into the full technology lifecycle. Key responsibilities include developing and maintaining cloud security controls, policies, standards and technical patterns; reviewing cloud architectures and identifying security weaknesses; configuring identity and access management, privileged access, encryption, network...

Learn more

FS AI Cyber Security Director

Added 27/10/2026

We are seeking an experienced FS AI Cyber Security Director to lead the development and execution of cyber security strategy across a complex financial services environment. This is a senior leadership role responsible for protecting critical data, platforms and services while enabling the safe and effective adoption of artificial intelligence. You will define the organisation’s AI security vision, policies and operating model, ensuring that emerging technologies are designed, implemented and governed in line with regulatory expectations and industry best practice. You will assess AI-related threats, including model manipulation, data poisoning, prompt injection, privacy risks, insecure automation and third-party exposure, and...

Learn more

Director, Cyber Security in Defence

Added 21/10/2026

We are seeking an experienced Director, Cyber Security in Defence to provide strategic leadership across a complex and highly regulated security environment. This is a senior role for a recognised cyber security professional who can shape enterprise-wide strategy, strengthen resilience and protect critical systems, information and capabilities against evolving threats. You will develop and implement a comprehensive cyber security strategy aligned with operational priorities, national security requirements and recognised industry standards. Working closely with senior stakeholders, you will advise on cyber risk, assurance and threat exposure, ensuring that security considerations are embedded into business planning, procurement, transformation and programme delivery....

Learn more

Director - Healthcare - Data Security and Data Protection

Added 30/10/2026

An exciting opportunity has arisen for a Director of Healthcare Data Security and Data Protection to lead the development and delivery of a robust information governance, cyber security and data protection strategy within a complex healthcare environment. This senior role will provide strategic leadership, ensuring that sensitive patient, clinical, workforce and corporate information is protected, appropriately managed and used to support safe, effective services. You will be responsible for setting the organisation’s data security and protection direction, advising executive leaders and senior stakeholders on risk, compliance and emerging threats. You will oversee policies, standards, controls and assurance frameworks, ensuring they...

Learn more

GSOC Security Engineering Lead

Added 28/09/2026

We are seeking a GSOC Security Engineering Lead to provide technical leadership within a global security operations environment. This role will guide the design, implementation, and continuous improvement of security monitoring, detection, and response capabilities. You will lead a team of security engineers, work closely with analysts and technology stakeholders, and help establish effective processes for identifying, investigating, and mitigating cyber threats across a complex enterprise environment. Your responsibilities will include developing and maintaining security engineering strategies, improving SIEM, SOAR, EDR, vulnerability management, and threat intelligence integrations, and ensuring that detection content and response playbooks remain effective against evolving threats....

Learn more

Cyber Fusion CSIRT Lead

Added 14/10/2026

We are seeking an experienced Cyber Fusion CSIRT Lead to direct the organisation’s cyber incident response capability and coordinate the effective detection, investigation, containment, and remediation of security threats. You will lead a team of incident responders and work closely with security operations, threat intelligence, digital forensics, vulnerability management, infrastructure, legal, risk, and business stakeholders. The role requires calm, decisive leadership during high-impact incidents and the ability to translate complex technical issues into clear advice for senior decision-makers. Responsibilities will include defining and continuously improving incident response processes, playbooks, escalation procedures, and communication plans; leading the triage and management of...

Learn more

Cyber Fusion CSIRT Lead

Added 14/10/2026

We are seeking a Cyber Fusion CSIRT Lead to direct and strengthen incident response, cyber threat intelligence and security operations across a complex technology environment. This role will lead the coordination of responses to significant cyber incidents, ensuring that threats are identified, contained, investigated and resolved efficiently. You will act as a senior point of contact during critical events, providing clear updates to technical teams, leadership and relevant stakeholders while maintaining a calm, structured and evidence-led approach. Key responsibilities include managing and mentoring a team of incident responders and cyber analysts; developing and maintaining CSIRT processes, playbooks and operating procedures;...

Learn more

Senior Manager, Associate Director, Cyber Incident Response Advisory and Incident Management

Added 23/10/2026

We are seeking a Senior Manager, Associate Director, Cyber Incident Response Advisory and Incident Management to lead the development and delivery of effective cyber incident response capabilities. This is a senior role requiring strong technical knowledge, sound judgement and the ability to provide calm, decisive leadership during complex and high-impact security incidents. You will oversee incident response activities from initial triage and investigation through to containment, recovery and post-incident review. Working closely with cyber security, technology, risk, legal, compliance, communications and senior leadership teams, you will coordinate timely responses, establish clear lines of accountability and ensure that key decisions are...

Learn more

Senior Manager, Associate Director, Cyber Incident Response Advisory and Incident Management

Added 23/10/2026

We are seeking an experienced Senior Manager or Associate Director to lead cyber incident response advisory and incident management activities within a complex, fast-paced environment. This is a high-impact role for a confident cyber security professional who can provide strategic direction while remaining comfortable supporting the management of significant incidents. You will lead the development and continuous improvement of incident response frameworks, playbooks, processes and governance arrangements. Working closely with technology, risk, legal, compliance, communications and business stakeholders, you will ensure the organisation is prepared to identify, contain, investigate and recover from cyber incidents effectively. Key responsibilities will include managing...

Learn more

Associate Manager - Cyber Security Incident Response

Added 23/09/2026

We are seeking an experienced Associate Manager – Cyber Security Incident Response to help protect critical systems, data and services from evolving cyber threats. In this role, you will support the management of security incidents from initial detection through to containment, eradication and recovery, ensuring that response activities are coordinated, timely and well documented. You will work closely with security operations, infrastructure, applications, risk, legal, privacy and business stakeholders to assess impact, determine priorities and guide effective remediation. Your responsibilities will include overseeing the triage and investigation of suspected security incidents, validating alerts and coordinating appropriate escalation. You will help...

Learn more

Manager, Cyber Incident Response Advisory, Recovery and Resilience

Added 23/10/2026

We are seeking a Manager, Cyber Incident Response Advisory, Recovery and Resilience to lead the development and delivery of effective cyber incident preparedness, response and recovery capabilities. This role will provide expert guidance to stakeholders across the organisation, helping to strengthen resilience against cyber threats and minimise operational impact when incidents occur. You will advise on cyber incident response plans, crisis management processes and recovery strategies, ensuring they remain practical, proportionate and aligned with business priorities. Responsibilities will include coordinating scenario-based exercises, facilitating post-incident reviews, identifying lessons learned and tracking improvement actions through to completion. You will also support the...

Learn more

Manager, Cyber Incident Response Advisory, Recovery and Resilience

Added 23/10/2026

We are seeking an experienced Manager, Cyber Incident Response Advisory, Recovery and Resilience to lead the development and delivery of effective cyber incident preparedness, response and recovery capabilities. This is an influential role for a professional who can combine technical understanding with strong stakeholder management, helping teams prepare for, respond to and learn from significant cyber events. You will provide expert advice on incident response, business continuity, disaster recovery and operational resilience. Working closely with technology, security, risk, legal, compliance and business teams, you will assess current capabilities, identify vulnerabilities and develop practical improvements that support a coordinated response to...

Learn more

Consultant, Senior Consultant, Cyber Incident Response Advisory, Recovery and Resilience

Added 26/10/2026

We are seeking experienced professionals to join a Cyber Incident Response Advisory, Recovery and Resilience team at Consultant and Senior Consultant level. This is an opportunity to support clients in preparing for, responding to and recovering from complex cyber incidents, while helping them strengthen their long-term resilience. You will work with organisations across a range of sectors to assess their cyber incident response capabilities, identify vulnerabilities and develop practical strategies for managing disruption. Responsibilities may include supporting incident response engagements, conducting readiness assessments, reviewing crisis management arrangements and contributing to post-incident lessons-learned reviews. You will also help clients develop and...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.