Security Incident Response Manager

Reference: 2hwb69xo4lvzssovpnw9

We are seeking an experienced Security Incident Response Manager to lead the detection, investigation, containment, and recovery of cybersecurity incidents across a complex technology environment. In this role, you will manage the incident response function, coordinate activity across security operations, infrastructure, engineering, legal, privacy, communications, and business teams, and ensure that incidents are handled efficiently and consistently. You will establish clear escalation procedures, define incident severity criteria, and provide calm, decisive leadership during high-impact events.

Key responsibilities include overseeing the full incident lifecycle, from initial triage and forensic investigation through remediation, recovery, and post-incident review. You will maintain and improve incident response plans, playbooks, communication processes, and crisis-management procedures, while ensuring alignment with relevant regulatory and industry requirements. The role will also involve leading tabletop exercises, readiness assessments, and continuous improvement initiatives; monitoring key performance indicators; preparing clear reports for senior stakeholders; and identifying recurring threats, control weaknesses, and opportunities to strengthen organisational resilience. You will work closely with threat intelligence and detection teams to improve alert quality and translate emerging risks into practical response measures.

The successful candidate will have substantial experience managing cybersecurity incidents in a fast-paced enterprise environment, including demonstrated expertise in incident coordination, digital forensics, malware analysis, threat hunting, and security investigations. Strong knowledge of security frameworks, attack methodologies, cloud environments, endpoint technologies, identity systems, and network security is expected. Experience with SIEM, SOAR, EDR, case-management, and forensic tools is highly desirable. You should be an effective communicator who can explain technical issues to both specialist and non-specialist audiences, make sound decisions under pressure, and build trusted relationships across teams. Relevant professional certifications and experience leading or mentoring security professionals would be advantageous.

COMPETITIVE SALARY
Added 23/09/2026
Reference: 2hwb69xo4lvzssovpnw9

Other similar jobs

Senior Manager, Global Cyber Security Incident Response (Global CSIRT)

Added 18/09/2026

We are seeking a Senior Manager, Global Cyber Security Incident Response to lead and evolve a global incident response capability. This role will be responsible for directing the identification, containment, investigation and recovery of significant cyber security incidents across a complex, international environment. You will provide calm, decisive leadership during high-impact events, coordinate technical and business stakeholders, and ensure that response activities protect critical services, data and customer trust. The role will also contribute to the development of a mature, intelligence-led and continuously improving Global CSIRT function. Key responsibilities include leading incident response teams and third-party partners through suspected and...

Learn more

Senior Security Incident Response Analyst

Added 23/09/2026

We are seeking a Senior Security Incident Response Analyst to lead the investigation, containment, and resolution of complex cybersecurity incidents across a diverse technology environment. In this role, you will monitor and analyse security alerts, coordinate rapid responses to suspected breaches, and provide expert guidance throughout the incident lifecycle. You will work closely with security operations, infrastructure, engineering, legal, risk, and business teams to assess impact, minimise disruption, and restore secure operations. Your responsibilities will include developing and refining incident response procedures, conducting detailed analysis of endpoint, network, identity, cloud, and application data, and performing forensic investigations to determine attack...

Learn more

Cyber Response & Recovery Assistant Manager (Reactive DFIR)

Added 02/09/2026

We are seeking a Cyber Response & Recovery Assistant Manager specialising in Reactive Digital Forensics and Incident Response (DFIR). This role will support the delivery of high-quality technical investigations and coordinated response activities following cyber incidents, helping clients understand what happened, contain threats, recover securely and strengthen their resilience. You will work across a varied caseload, including malware outbreaks, ransomware, data breaches, insider activity, business email compromise and other suspected security events. Key responsibilities will include leading or supporting end-to-end incident response engagements; collecting, preserving and analysing digital evidence from endpoints, servers, cloud environments, networks and mobile devices; developing investigative...

Learn more

Cyber Response & Recovery Manager (Remediation)

Added 02/09/2026

We are seeking an experienced Cyber Response & Recovery Manager (Remediation) to lead the coordination, delivery and assurance of remediation activities following cyber incidents, security assessments and control failures. The successful candidate will work across technology, risk, operations and business teams to ensure identified weaknesses are addressed promptly, sustainably and in line with regulatory, risk and security requirements. This role will help strengthen organisational resilience by turning incident findings and lessons learned into measurable improvements. Key responsibilities include owning and maintaining remediation plans, coordinating actions across multiple stakeholders, and tracking progress against agreed milestones, risk tolerances and deadlines. You will...

Learn more

Cyber Response Assistant Manager (Proactive Consulting)

Added 02/09/2026

We are seeking a Cyber Response Assistant Manager to support the delivery of proactive cyber security consulting services across a diverse range of clients and environments. This role will help organisations identify, assess and reduce cyber risk before incidents occur, while also contributing to their readiness to respond effectively when threats emerge. You will work closely with senior consultants, technical specialists and client stakeholders to deliver practical, risk-based advice aligned with business objectives, regulatory expectations and recognised security frameworks. Your responsibilities will include supporting cyber maturity assessments, incident response readiness reviews, threat and vulnerability assessments, tabletop exercises, security control evaluations...

Learn more

Cyber Response & Recovery Manager (Reactive DFIR) - German Speaking

Added 02/09/2026

We are seeking a Cyber Response & Recovery Manager specialising in reactive digital forensics and incident response (DFIR) to lead the investigation and containment of complex cyber incidents. This role will manage response activities from initial triage through eradication, recovery and post-incident review, helping organisations restore secure operations while preserving critical evidence. The successful candidate will be fluent in German and English and confident working with stakeholders across technical, operational and executive levels in high-pressure situations. You will coordinate incident response engagements, establish priorities, allocate technical resources and maintain clear communication throughout each phase of an investigation. Responsibilities will include...

Learn more

Cyber Response and Recovery - Assistant Manager (Proactive)

Added 26/08/2026

We are seeking a Cyber Response and Recovery – Assistant Manager (Proactive) to strengthen organisational resilience against cyber threats. This role will focus on preparing for, preventing and reducing the impact of cyber incidents through effective planning, testing and continuous improvement. You will work closely with cybersecurity, technology, risk, compliance, business continuity and operational teams to ensure the organisation is ready to respond to disruption and recover critical services safely and efficiently. Key responsibilities will include developing and maintaining cyber incident response, recovery and crisis management plans; coordinating tabletop exercises, simulations and technical recovery tests; documenting lessons learned and tracking...

Learn more

Cyber Response and Recovery - Assistant Manager (Reactive)

Added 18/08/2026

We are seeking an enthusiastic and skilled Cyber Response and Recovery - Assistant Manager (Reactive) to join our dynamic team. In this role, you will be responsible for leading incident response efforts during cyber incidents, ensuring that all incidents are efficiently managed and that recovery processes are executed effectively. You will collaborate with cross-functional teams to analyze and respond to cyber threats, while also developing and implementing incident response plans that align with industry best practices. Your proactive approach will help minimize impact and restore services swiftly during security breaches. The ideal candidate will possess strong analytical and problem-solving skills,...

Learn more

Assistant Manager - Cyber and Digital Health

Added 25/08/2026

We are seeking an Assistant Manager – Cyber and Digital Health to support the delivery of secure, effective and innovative digital services across a complex health environment. This role will contribute to the development and implementation of cyber security, information governance and digital health initiatives, helping to protect sensitive information while enabling high-quality care and efficient service delivery. You will assist with cyber risk assessments, security assurance activities, incident response, vulnerability management and compliance monitoring. Working with clinical, operational, technical and external stakeholders, you will help translate security requirements into practical controls and support the delivery of projects involving digital...

Learn more

Cyber Security Engineer, (Cloud Security Specialist)

Added 07/10/2026

We are seeking a Cyber Security Engineer, (Cloud Security Specialist) to help protect cloud environments, applications, infrastructure and data against evolving cyber threats. This role will contribute to the design, implementation and continuous improvement of secure cloud services across platforms such as Microsoft Azure, Amazon Web Services or Google Cloud. You will work closely with infrastructure, engineering, architecture, development and risk teams to embed security into the full technology lifecycle. Key responsibilities include developing and maintaining cloud security controls, policies, standards and technical patterns; reviewing cloud architectures and identifying security weaknesses; configuring identity and access management, privileged access, encryption, network...

Learn more

GSOC Security Engineering Lead

Added 28/09/2026

We are seeking a GSOC Security Engineering Lead to provide technical leadership within a global security operations environment. This role will guide the design, implementation, and continuous improvement of security monitoring, detection, and response capabilities. You will lead a team of security engineers, work closely with analysts and technology stakeholders, and help establish effective processes for identifying, investigating, and mitigating cyber threats across a complex enterprise environment. Your responsibilities will include developing and maintaining security engineering strategies, improving SIEM, SOAR, EDR, vulnerability management, and threat intelligence integrations, and ensuring that detection content and response playbooks remain effective against evolving threats....

Learn more

Director - Healthcare - Cyber Security

Added 01/09/2026

We are seeking an experienced Director of Cyber Security to lead the development and delivery of a comprehensive security strategy within a complex healthcare environment. This senior leadership role will protect sensitive clinical, operational and personal information while enabling safe, reliable and digitally driven care. You will provide strategic direction across cyber security, information assurance, risk management, resilience and regulatory compliance, ensuring that security remains aligned with organisational priorities and patient safety. Key responsibilities will include establishing and maintaining the cyber security roadmap; overseeing security operations, threat monitoring, vulnerability management, incident response and identity and access controls; and strengthening governance,...

Learn more

Incident Response Manager, Security Operations Group | Worldwide Operations Security

Added 07/10/2026

We are seeking an experienced Incident Response Manager to lead the coordination, investigation, and resolution of security incidents across a complex, globally distributed operational environment. This role will oversee incident response activities from initial detection and triage through containment, eradication, recovery, and post-incident review. You will work closely with security operations, threat intelligence, cyber investigations, technology, legal, risk, and business teams to protect people, facilities, information, and critical services. Key responsibilities include managing high-severity incidents and serving as an escalation point during active events; establishing incident priorities, response plans, communications, and decision-making processes; directing investigations involving cyber threats, insider risk,...

Learn more

Security Engineering Manager - Incident Response, AWS CloudOps

Added 06/10/2026

We are seeking a Security Engineering Manager to lead incident response and cloud security operations across a complex AWS environment. This role will manage a team of security engineers and coordinate the detection, investigation, containment, and recovery of security incidents affecting cloud infrastructure, applications, and data. You will establish effective response processes, improve operational readiness, and ensure incidents are handled quickly, consistently, and with clear communication to technical and business stakeholders. Responsibilities include developing and maintaining incident response playbooks, leading investigations into suspected compromises, and coordinating forensic analysis, remediation, and post-incident reviews. You will partner with CloudOps, infrastructure, software engineering,...

Learn more

Security Engineering Manager - Incident Response, AWS CloudOps

Added 06/10/2026

We are seeking a Security Engineering Manager to lead incident response and cloud operations security across a complex, highly available environment. This role will manage a team of security engineers and coordinate the organisation’s response to cyber incidents, from initial detection and triage through containment, eradication, recovery, and post-incident improvement. You will establish clear operational processes, strengthen monitoring and detection capabilities, and ensure that security events are handled consistently, rapidly, and with appropriate business communication. You will oversee the development and maintenance of incident response plans, playbooks, escalation procedures, and crisis exercises. Working closely with infrastructure, platform engineering, application development,...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.