Disputes & Investigations - Senior Director, Incident Response Lead

Reference: 1gao67k48g728uw0lmze

We are seeking an experienced Senior Director to lead incident response activities across a complex, highly regulated environment. This is a senior leadership role responsible for directing the response to significant disputes, investigations, misconduct matters, regulatory concerns and other critical incidents that may affect customers, colleagues, operations or reputation.

The successful candidate will establish and oversee a robust incident response framework, ensuring that matters are identified, assessed, escalated and managed consistently. You will lead multidisciplinary response teams, bringing together legal, compliance, risk, security, communications, technology, operations and other relevant specialists. You will provide clear direction during fast-moving and sensitive situations, ensuring decisions are evidence-based, proportionate and aligned with applicable laws, policies and governance requirements.

Key responsibilities will include assessing emerging issues, defining response strategies, coordinating investigations, overseeing fact-finding and evidence preservation, and maintaining accurate records of key decisions and actions. You will prepare concise briefings for senior stakeholders and governance committees, manage communications with internal and external parties where appropriate, and ensure that regulatory, legal and reporting obligations are met. You will also identify lessons learned, oversee remediation activity and use incident insights to strengthen controls and reduce the likelihood of recurrence.

In addition, you will develop response playbooks, standards and training, promote a consistent approach to case management, and build strong relationships with senior stakeholders across the business. The role requires sound judgement, discretion and the confidence to challenge constructively in high-pressure circumstances.

You will bring significant experience leading complex investigations, crisis management or incident response within a large, regulated or international organisation. A strong understanding of governance, risk, compliance, legal considerations and investigative methodologies is essential. You should be an exceptional communicator with proven experience influencing senior decision-makers, managing confidential information and leading teams through ambiguity. Relevant professional qualifications in law, investigations, risk, compliance, security or a related discipline would be advantageous.

COMPETITIVE SALARY
Added 26/10/2026
Reference: 1gao67k48g728uw0lmze

Disputes & Investigations - Senior Director, Incident Response Lead

London, England, United Kingdom Permanent Incident Response

Other similar jobs

Senior Manager, Associate Director, Cyber Incident Response Advisory and Incident Management

Added 23/10/2026

We are seeking a Senior Manager, Associate Director, Cyber Incident Response Advisory and Incident Management to lead the development and delivery of effective cyber incident response capabilities. This is a senior role requiring strong technical knowledge, sound judgement and the ability to provide calm, decisive leadership during complex and high-impact security incidents. You will oversee incident response activities from initial triage and investigation through to containment, recovery and post-incident review. Working closely with cyber security, technology, risk, legal, compliance, communications and senior leadership teams, you will coordinate timely responses, establish clear lines of accountability and ensure that key decisions are...

Learn more

Senior Manager, Associate Director, Cyber Incident Response Advisory and Incident Management

Added 23/10/2026

We are seeking an experienced Senior Manager or Associate Director to lead cyber incident response advisory and incident management activities within a complex, fast-paced environment. This is a high-impact role for a confident cyber security professional who can provide strategic direction while remaining comfortable supporting the management of significant incidents. You will lead the development and continuous improvement of incident response frameworks, playbooks, processes and governance arrangements. Working closely with technology, risk, legal, compliance, communications and business stakeholders, you will ensure the organisation is prepared to identify, contain, investigate and recover from cyber incidents effectively. Key responsibilities will include managing...

Learn more

Incident Response Lead

Added 02/11/2026

We are seeking an experienced Incident Response Lead to take ownership of the organisation’s approach to identifying, managing and resolving technology and security incidents. This is a key role in strengthening operational resilience, reducing service disruption and ensuring that incidents are handled consistently, efficiently and with clear accountability. You will lead the response to major and complex incidents, coordinating technical teams, service owners, suppliers and senior stakeholders throughout the incident lifecycle. Responsibilities will include assessing impact and urgency, establishing appropriate response structures, maintaining accurate communications, directing investigation and recovery activities, and ensuring that agreed service levels are met. You will...

Learn more

Cyber Incident Response Lead

Added 21/10/2026

We are seeking an experienced Cyber Incident Response Lead to direct the investigation, containment and recovery of significant cyber security incidents. This is a hands-on leadership role for an accomplished incident responder who can provide calm, decisive direction during high-pressure situations and strengthen organisational resilience over the long term. You will lead the end-to-end response to security incidents, from initial triage and forensic investigation through to eradication, recovery and post-incident review. You will coordinate technical teams and wider stakeholders, establish response priorities, maintain accurate incident records and provide clear updates to senior leaders. The role will also involve assessing potential...

Learn more

Cybersecurity Incident Response Lead

Added 22/09/2026

We are seeking a Cybersecurity Incident Response Lead to coordinate the identification, containment, investigation and resolution of security incidents across a complex technology environment. You will provide technical leadership during high-impact events, ensuring that response activities are structured, timely and aligned with established security and business continuity objectives. The role will work closely with security operations, infrastructure, application, legal, risk, compliance and communications teams to reduce operational impact and protect sensitive information. Responsibilities will include leading incident response investigations from initial triage through recovery and post-incident review; assessing alerts, indicators of compromise and reported threats; directing containment, eradication and remediation...

Learn more

Cyber Incident Response Lead

Added 09/09/2026

We are seeking an experienced Cyber Incident Response Lead to direct the identification, investigation, containment and recovery of complex cybersecurity incidents. You will provide senior technical leadership throughout the incident lifecycle, coordinating rapid and effective responses to threats affecting systems, networks, applications, cloud environments and sensitive data. The role will involve assessing alerts, validating incidents, determining scope and impact, developing containment strategies, and ensuring that recovery actions are completed safely and efficiently. You will lead incident response activities across multidisciplinary teams, including security operations, infrastructure, engineering, risk, legal, communications and business stakeholders. Responsibilities will include establishing response priorities, allocating resources,...

Learn more

Senior Cloud Incident Response Consultant

Added 29/10/2026

We are seeking a Senior Cloud Incident Response Consultant to lead the investigation, containment and resolution of complex security incidents across cloud environments. This is a senior technical role for an experienced incident responder who can work confidently under pressure, provide clear direction during critical events and help organisations strengthen their resilience against future threats. You will lead end-to-end incident response activities, from initial triage and scoping through containment, eradication, recovery and post-incident review. Working across cloud platforms, you will analyse identity and access activity, network traffic, workloads, endpoints, logs and other sources of forensic evidence. You will develop and...

Learn more

Consultant, Senior Consultant, Cyber Incident Response Advisory, Recovery and Resilience

Added 26/10/2026

We are seeking experienced professionals to join a Cyber Incident Response Advisory, Recovery and Resilience team at Consultant and Senior Consultant level. This is an opportunity to support clients in preparing for, responding to and recovering from complex cyber incidents, while helping them strengthen their long-term resilience. You will work with organisations across a range of sectors to assess their cyber incident response capabilities, identify vulnerabilities and develop practical strategies for managing disruption. Responsibilities may include supporting incident response engagements, conducting readiness assessments, reviewing crisis management arrangements and contributing to post-incident lessons-learned reviews. You will also help clients develop and...

Learn more

Consultant, Senior Consultant, Cyber Incident Response Advisory, Recovery and Resilience

Added 26/10/2026

We are seeking experienced professionals to join a cyber incident response advisory, recovery and resilience team. Opportunities are available at Consultant and Senior Consultant level for individuals who can help clients prepare for, respond to and recover from significant cyber security incidents. You will work with a broad range of stakeholders, supporting organisations in strengthening their ability to withstand disruption and maintain critical services. You will contribute to incident response engagements, including assessing the impact of cyber attacks, supporting containment and recovery activities, coordinating technical and business workstreams, and helping clients return to normal operations. You will also assist with...

Learn more

Senior Threat Hunting & Incident Response - EMEA

Added 07/10/2026

We are seeking a Senior Threat Hunting & Incident Response professional to lead advanced cyber defence activities across the EMEA region. This role will be responsible for proactively identifying sophisticated threats, investigating security incidents and coordinating effective containment and recovery actions. You will work closely with security operations, infrastructure, cloud, application and risk teams to strengthen detection capabilities and reduce organisational exposure. Key responsibilities include designing and executing threat-hunting investigations across endpoint, network, identity, cloud and application environments; analysing security telemetry to identify indicators of compromise, attacker behaviour and emerging techniques; and leading incident response activities from initial triage through...

Learn more

Senior Security Incident Response Analyst

Added 23/09/2026

We are seeking a Senior Security Incident Response Analyst to lead the investigation, containment, and resolution of complex cybersecurity incidents across a diverse technology environment. In this role, you will monitor and analyse security alerts, coordinate rapid responses to suspected breaches, and provide expert guidance throughout the incident lifecycle. You will work closely with security operations, infrastructure, engineering, legal, risk, and business teams to assess impact, minimise disruption, and restore secure operations. Your responsibilities will include developing and refining incident response procedures, conducting detailed analysis of endpoint, network, identity, cloud, and application data, and performing forensic investigations to determine attack...

Learn more

Senior Manager, Global Cyber Security Incident Response (Global CSIRT)

Added 18/09/2026

We are seeking a Senior Manager, Global Cyber Security Incident Response to lead and evolve a global incident response capability. This role will be responsible for directing the identification, containment, investigation and recovery of significant cyber security incidents across a complex, international environment. You will provide calm, decisive leadership during high-impact events, coordinate technical and business stakeholders, and ensure that response activities protect critical services, data and customer trust. The role will also contribute to the development of a mature, intelligence-led and continuously improving Global CSIRT function. Key responsibilities include leading incident response teams and third-party partners through suspected and...

Learn more

Security Operations Engineer, AWS Security Cloud Response, Amazon Security Cloud Security Response

Added 14/10/2026

We are seeking a Security Operations Engineer to support cloud security response activities in a fast-paced, highly distributed environment. In this role, you will help protect cloud infrastructure, services, and customer data by investigating security events, coordinating incident response, and improving detection and response capabilities. You will work closely with security engineering, infrastructure, software development, and operations teams to identify threats, contain incidents, and reduce the likelihood of recurrence. Your responsibilities will include monitoring and analysing security alerts, conducting technical investigations, triaging suspected compromises, and supporting the full incident management lifecycle. You will develop and maintain incident response procedures, playbooks,...

Learn more

Product Security Incident Response Program Manager (m/f/d)

Added 29/10/2026

We are seeking a Product Security Incident Response Programme Manager (m/f/d) to lead the planning, coordination and continuous improvement of our response to product security incidents. In this role, you will help protect customers, products and services by ensuring that security vulnerabilities and incidents are assessed, managed and resolved efficiently across a complex, international environment. You will own and develop the product security incident response framework, including policies, processes, playbooks, escalation paths and communication procedures. Working closely with product security, engineering, software development, legal, communications, privacy and customer-facing teams, you will coordinate the end-to-end response to incidents, from initial triage...

Learn more

Incident Response Analyst

Added 29/10/2026

An exciting opportunity has arisen for an Incident Response Analyst to join a fast-paced security operations environment. You will play a key role in identifying, investigating and responding to cyber security incidents, helping to protect critical systems, data and services. This role would suit an analytical and motivated security professional who is confident working under pressure and communicating clearly with both technical and non-technical colleagues. You will monitor and assess security alerts, triage suspected incidents and carry out detailed investigations across endpoints, networks, cloud platforms and applications. Responsibilities will include analysing log data, identifying indicators of compromise, containing threats, supporting...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.