Head of Security Incident Management

Reference: fkbcanlbj3n8767ouvhm

As Head of Security Incident Management, you will lead the organisation’s capability to detect, respond to, contain and recover from cybersecurity incidents. You will provide strategic direction and operational leadership across incident response, ensuring that security events are managed quickly, consistently and effectively. Working closely with cyber defence, technology, risk, legal, communications, business continuity and senior leadership teams, you will coordinate responses to incidents ranging from suspected breaches and ransomware to insider threats, data loss and significant service disruption.

You will establish and continuously improve incident management processes, playbooks, escalation routes and communication procedures. The role will involve leading major incident response activities, assessing impact and risk, coordinating technical and business stakeholders, and ensuring clear, timely updates for decision-makers. You will oversee post-incident reviews, root-cause analysis and the delivery of corrective actions, using lessons learned to strengthen controls and reduce the likelihood and impact of future events. You will also contribute to security exercises, crisis simulations, threat-informed preparedness and the development of meaningful performance metrics and reporting for senior governance forums.

The successful candidate will bring substantial experience in cybersecurity incident response, security operations, crisis management or a related discipline, ideally within a complex, highly regulated or international environment. You will have a strong understanding of incident response frameworks, threat landscapes, digital forensics, vulnerability management, business continuity and relevant regulatory obligations. Excellent judgement, calm decision-making and the ability to communicate clearly during high-pressure situations are essential. You should be confident influencing senior stakeholders, managing competing priorities and leading multidisciplinary teams. Relevant professional certifications in information security, incident handling, risk or service management would be advantageous. This is an opportunity to shape a mature, resilient security capability and help protect critical services, information and customers.

COMPETITIVE SALARY
Added 24/09/2026
Reference: fkbcanlbj3n8767ouvhm

Head of Security Incident Management

London, England, United Kingdom Permanent Incident Response

Other similar jobs

Application & Development Security Lead

Added 21/08/2026

We are seeking an experienced Application & Development Security Lead to join our dynamic team. In this pivotal role, you will be responsible for overseeing the security of our application development processes. This includes implementing security best practices, conducting risk assessments, and ensuring compliance with industry standards. You will work closely with development teams to integrate security measures throughout the software development lifecycle, from design to deployment. Your expertise will be crucial in identifying vulnerabilities and recommending effective remediation strategies to safeguard our applications. The ideal candidate will have a deep understanding of secure coding practices, application architecture, and vulnerability...

Learn more

Head of Cyber Defence & Incident Response

Added 25/08/2026

We are seeking an experienced Head of Cyber Defence & Incident Response to lead the development and delivery of a resilient, intelligence-led cyber security capability. This senior role will provide strategic direction across security operations, threat detection, incident response, vulnerability management and cyber resilience, ensuring the organisation is prepared to prevent, identify, contain and recover from increasingly sophisticated threats. You will advise senior stakeholders on cyber risk, translate technical issues into clear business impacts, and promote a strong culture of security and continuous improvement. Key responsibilities will include leading and developing cyber defence and incident response teams; establishing and refining...

Learn more

Head of Cyber Defence & Incident Response

Added 20/08/2026

We are seeking a dynamic and experienced Head of Cyber Defence & Incident Response to lead our cyber security initiatives. This pivotal role involves developing and implementing robust incident response strategies to safeguard our organization against potential threats. The successful candidate will oversee the cyber defence team, ensuring the identification, containment, and remediation of security incidents. You will be responsible for establishing and maintaining incident response protocols, conducting threat assessments, and coordinating with cross-functional teams to enhance overall security posture. A key part of your role will involve staying abreast of emerging threats and trends in cyber security to proactively...

Learn more

Head of Cyber Security Risk Management, Digital Identity

Added 18/08/2026

We are seeking a highly skilled and strategic Head of Cyber Security Risk Management, Digital Identity to lead our efforts in safeguarding digital identities and ensuring robust risk management practices. In this pivotal role, you will be responsible for developing and implementing a comprehensive cyber security risk management framework, specifically focused on digital identity threats and vulnerabilities. You will work closely with cross-functional teams to identify risks, assess their impact, and create effective mitigation strategies to protect sensitive information and maintain compliance with industry standards. Your key responsibilities will include overseeing the evaluation of existing digital identity systems and protocols,...

Learn more

Head of Threat & Vulnerability Management

Added 06/10/2026

We are seeking a strategic and technically accomplished Head of Threat & Vulnerability Management to lead the development and delivery of an enterprise-wide capability that identifies, assesses and reduces cyber risk. This role will provide expert direction across threat intelligence, vulnerability assessment, security testing and remediation, ensuring that risks are understood, prioritised and addressed in line with business objectives and regulatory expectations. You will work closely with technology, infrastructure, application, risk and governance teams to embed secure-by-design principles and strengthen organisational resilience. Key responsibilities will include setting the strategy, policies, standards and operating model for threat and vulnerability management; leading...

Learn more

Head of Vulnerability Management - Government Digital Service - G6

Added 15/09/2026

We are seeking an experienced Head of Vulnerability Management to lead the development and delivery of a mature, risk-based vulnerability management capability across a complex digital and technology estate. This is a senior role requiring strong leadership, sound technical judgement and the ability to influence stakeholders at all levels. You will set the strategic direction for identifying, assessing, prioritising and remediating vulnerabilities, ensuring that security risks are understood and managed effectively. You will oversee vulnerability scanning, threat intelligence, exposure assessment, remediation tracking and reporting across infrastructure, applications, cloud services and third-party environments. Working closely with cyber security, architecture, engineering, service...

Learn more

Head of Vulnerability Management

Added 14/09/2026

We are seeking an experienced Head of Vulnerability Management to lead the development and delivery of a comprehensive, risk-based vulnerability management programme. This is a strategic leadership role responsible for reducing cyber risk across a complex technology environment, including cloud platforms, on-premises infrastructure, applications, endpoints and third-party services. You will define the vulnerability management vision, establish effective governance and ensure that security risks are identified, prioritised and remediated in line with business objectives and regulatory expectations. You will lead a team of vulnerability management specialists and work closely with Security Operations, Infrastructure, Engineering, Architecture, Risk, Compliance and Technology leadership. Responsibilities...

Learn more

Incident Response Manager, Security Operations Group | Worldwide Operations Security

Added 07/10/2026

We are seeking an experienced Incident Response Manager to lead the coordination, investigation, and resolution of security incidents across a complex, globally distributed operational environment. This role will oversee incident response activities from initial detection and triage through containment, eradication, recovery, and post-incident review. You will work closely with security operations, threat intelligence, cyber investigations, technology, legal, risk, and business teams to protect people, facilities, information, and critical services. Key responsibilities include managing high-severity incidents and serving as an escalation point during active events; establishing incident priorities, response plans, communications, and decision-making processes; directing investigations involving cyber threats, insider risk,...

Learn more

Security Engineer I, AWS Security Incident Response

Added 02/09/2026

We are seeking a Security Engineer I to support cloud security incident response and help protect critical systems, applications, and data. In this entry-level role, you will monitor, investigate, and respond to suspected security events across cloud environments, working closely with experienced security professionals and technical teams. You will contribute to the full incident lifecycle, including alert triage, evidence collection, containment, eradication, recovery, and post-incident review. Key responsibilities include analysing logs, alerts, and network or endpoint telemetry; investigating potential unauthorised access, malware, data exposure, and account compromise; documenting findings and maintaining accurate case records; and escalating incidents according to established...

Learn more

Security Engineer I, AWS Security Incident Response

Added 02/09/2026

We are seeking a Security Engineer I, AWS Security Incident Response to help protect cloud environments, investigate security events, and strengthen incident response capabilities. In this role, you will work with security operations, engineering, and infrastructure teams to identify, contain, and remediate threats affecting AWS accounts, services, and workloads. You will contribute to the development of repeatable processes that improve detection, response times, and overall cloud security resilience. Key responsibilities include monitoring and triaging security alerts, investigating suspicious activity across AWS services, and supporting incident response from initial analysis through containment, recovery, and post-incident review. You will assist with log...

Learn more

Security Engineer, Incident Response

Added 08/10/2026

We are seeking a Security Engineer, Incident Response to help protect critical systems, applications, and data from evolving cyber threats. In this role, you will investigate security alerts and incidents, coordinate effective containment and remediation, and help strengthen the organisation’s overall detection and response capabilities. You will work closely with security operations, infrastructure, engineering, application, and business teams to manage incidents from initial triage through recovery and post-incident review. Your responsibilities will include monitoring and analysing alerts from endpoint, network, identity, cloud, and application security tools; conducting forensic investigations; identifying attack techniques, indicators of compromise, and root causes; and maintaining...

Learn more

Security Engineering Manager - Incident Response, AWS CloudOps

Added 06/10/2026

We are seeking a Security Engineering Manager to lead incident response and cloud security operations across a complex AWS environment. This role will manage a team of security engineers and coordinate the detection, investigation, containment, and recovery of security incidents affecting cloud infrastructure, applications, and data. You will establish effective response processes, improve operational readiness, and ensure incidents are handled quickly, consistently, and with clear communication to technical and business stakeholders. Responsibilities include developing and maintaining incident response playbooks, leading investigations into suspected compromises, and coordinating forensic analysis, remediation, and post-incident reviews. You will partner with CloudOps, infrastructure, software engineering,...

Learn more

Security Engineering Manager - Incident Response, AWS CloudOps

Added 06/10/2026

We are seeking a Security Engineering Manager to lead incident response and cloud operations security across a complex, highly available environment. This role will manage a team of security engineers and coordinate the organisation’s response to cyber incidents, from initial detection and triage through containment, eradication, recovery, and post-incident improvement. You will establish clear operational processes, strengthen monitoring and detection capabilities, and ensure that security events are handled consistently, rapidly, and with appropriate business communication. You will oversee the development and maintenance of incident response plans, playbooks, escalation procedures, and crisis exercises. Working closely with infrastructure, platform engineering, application development,...

Learn more

Associate Manager - Cyber Security Incident Response

Added 23/09/2026

We are seeking an experienced Associate Manager – Cyber Security Incident Response to help protect critical systems, data and services from evolving cyber threats. In this role, you will support the management of security incidents from initial detection through to containment, eradication and recovery, ensuring that response activities are coordinated, timely and well documented. You will work closely with security operations, infrastructure, applications, risk, legal, privacy and business stakeholders to assess impact, determine priorities and guide effective remediation. Your responsibilities will include overseeing the triage and investigation of suspected security incidents, validating alerts and coordinating appropriate escalation. You will help...

Learn more

Senior Security Incident Response Analyst

Added 23/09/2026

We are seeking a Senior Security Incident Response Analyst to lead the investigation, containment, and resolution of complex cybersecurity incidents across a diverse technology environment. In this role, you will monitor and analyse security alerts, coordinate rapid responses to suspected breaches, and provide expert guidance throughout the incident lifecycle. You will work closely with security operations, infrastructure, engineering, legal, risk, and business teams to assess impact, minimise disruption, and restore secure operations. Your responsibilities will include developing and refining incident response procedures, conducting detailed analysis of endpoint, network, identity, cloud, and application data, and performing forensic investigations to determine attack...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.