Incident Response Lead

Reference: raxw0mqehidbn2srtfex

We are seeking an experienced Incident Response Lead to take ownership of the organisation’s approach to identifying, managing and resolving technology and security incidents. This is a key role in strengthening operational resilience, reducing service disruption and ensuring that incidents are handled consistently, efficiently and with clear accountability.

You will lead the response to major and complex incidents, coordinating technical teams, service owners, suppliers and senior stakeholders throughout the incident lifecycle. Responsibilities will include assessing impact and urgency, establishing appropriate response structures, maintaining accurate communications, directing investigation and recovery activities, and ensuring that agreed service levels are met. You will also provide regular updates to stakeholders and ensure that incidents are formally closed once services are stable.

A core part of the role will be driving continual improvement. You will facilitate post-incident reviews, identify root causes and contributing factors, track corrective actions, and ensure that lessons learned are translated into practical improvements. You will help develop and maintain incident response processes, playbooks, escalation routes and communication templates, while supporting testing and exercising of response arrangements.

The successful candidate will have proven experience leading major incident or security incident response within a complex technology environment. You will be confident making decisions under pressure, prioritising competing demands and communicating clearly with both technical and non-technical audiences. Experience of IT service management frameworks, incident management tools, root-cause analysis and operational risk management is essential. Familiarity with cyber security incidents, cloud services and third-party supplier management would be advantageous.

You will bring strong leadership, facilitation and influencing skills, together with a calm, structured and collaborative approach. Relevant qualifications in IT service management, cyber security, business continuity or a related discipline are desirable. The role may involve participation in an out-of-hours escalation rota, so flexibility and a commitment to maintaining high standards during critical events are important.

£59,207.00 - £70,958.00
Per annum
Added 02/11/2026
Reference: raxw0mqehidbn2srtfex

Other similar jobs

Commercial Security and Information Assurance Lead

Added 21/10/2026

We are seeking an experienced Commercial Security and Information Assurance Lead to provide strategic direction and practical leadership across commercial security, information assurance and risk management. This is an influential role responsible for protecting sensitive information, strengthening security practices and ensuring that commercial activity supports regulatory, contractual and organisational requirements. You will lead the development, implementation and continual improvement of security and information assurance frameworks, policies and processes. Working with colleagues across procurement, legal, technology, operations and senior leadership, you will assess risks, define appropriate controls and provide clear, proportionate advice throughout the commercial lifecycle. You will also support security...

Learn more

Senior Manager, Associate Director, Cyber Incident Response Advisory and Incident Management

Added 23/10/2026

We are seeking a Senior Manager, Associate Director, Cyber Incident Response Advisory and Incident Management to lead the development and delivery of effective cyber incident response capabilities. This is a senior role requiring strong technical knowledge, sound judgement and the ability to provide calm, decisive leadership during complex and high-impact security incidents. You will oversee incident response activities from initial triage and investigation through to containment, recovery and post-incident review. Working closely with cyber security, technology, risk, legal, compliance, communications and senior leadership teams, you will coordinate timely responses, establish clear lines of accountability and ensure that key decisions are...

Learn more

Senior Manager, Associate Director, Cyber Incident Response Advisory and Incident Management

Added 23/10/2026

We are seeking an experienced Senior Manager or Associate Director to lead cyber incident response advisory and incident management activities within a complex, fast-paced environment. This is a high-impact role for a confident cyber security professional who can provide strategic direction while remaining comfortable supporting the management of significant incidents. You will lead the development and continuous improvement of incident response frameworks, playbooks, processes and governance arrangements. Working closely with technology, risk, legal, compliance, communications and business stakeholders, you will ensure the organisation is prepared to identify, contain, investigate and recover from cyber incidents effectively. Key responsibilities will include managing...

Learn more

Disputes & Investigations - Senior Director, Incident Response Lead

Added 26/10/2026

We are seeking an experienced Senior Director to lead incident response activities across a complex, highly regulated environment. This is a senior leadership role responsible for directing the response to significant disputes, investigations, misconduct matters, regulatory concerns and other critical incidents that may affect customers, colleagues, operations or reputation. The successful candidate will establish and oversee a robust incident response framework, ensuring that matters are identified, assessed, escalated and managed consistently. You will lead multidisciplinary response teams, bringing together legal, compliance, risk, security, communications, technology, operations and other relevant specialists. You will provide clear direction during fast-moving and sensitive situations,...

Learn more

Cyber Incident Response Lead

Added 21/10/2026

We are seeking an experienced Cyber Incident Response Lead to direct the investigation, containment and recovery of significant cyber security incidents. This is a hands-on leadership role for an accomplished incident responder who can provide calm, decisive direction during high-pressure situations and strengthen organisational resilience over the long term. You will lead the end-to-end response to security incidents, from initial triage and forensic investigation through to eradication, recovery and post-incident review. You will coordinate technical teams and wider stakeholders, establish response priorities, maintain accurate incident records and provide clear updates to senior leaders. The role will also involve assessing potential...

Learn more

Cybersecurity Incident Response Lead

Added 22/09/2026

We are seeking a Cybersecurity Incident Response Lead to coordinate the identification, containment, investigation and resolution of security incidents across a complex technology environment. You will provide technical leadership during high-impact events, ensuring that response activities are structured, timely and aligned with established security and business continuity objectives. The role will work closely with security operations, infrastructure, application, legal, risk, compliance and communications teams to reduce operational impact and protect sensitive information. Responsibilities will include leading incident response investigations from initial triage through recovery and post-incident review; assessing alerts, indicators of compromise and reported threats; directing containment, eradication and remediation...

Learn more

Cyber Incident Response Lead

Added 09/09/2026

We are seeking an experienced Cyber Incident Response Lead to direct the identification, investigation, containment and recovery of complex cybersecurity incidents. You will provide senior technical leadership throughout the incident lifecycle, coordinating rapid and effective responses to threats affecting systems, networks, applications, cloud environments and sensitive data. The role will involve assessing alerts, validating incidents, determining scope and impact, developing containment strategies, and ensuring that recovery actions are completed safely and efficiently. You will lead incident response activities across multidisciplinary teams, including security operations, infrastructure, engineering, risk, legal, communications and business stakeholders. Responsibilities will include establishing response priorities, allocating resources,...

Learn more

Security Operations Engineer, AWS Security Cloud Response, Amazon Security Cloud Security Response

Added 14/10/2026

We are seeking a Security Operations Engineer to support cloud security response activities in a fast-paced, highly distributed environment. In this role, you will help protect cloud infrastructure, services, and customer data by investigating security events, coordinating incident response, and improving detection and response capabilities. You will work closely with security engineering, infrastructure, software development, and operations teams to identify threats, contain incidents, and reduce the likelihood of recurrence. Your responsibilities will include monitoring and analysing security alerts, conducting technical investigations, triaging suspected compromises, and supporting the full incident management lifecycle. You will develop and maintain incident response procedures, playbooks,...

Learn more

Incident Response Analyst

Added 29/10/2026

An exciting opportunity has arisen for an Incident Response Analyst to join a fast-paced security operations environment. You will play a key role in identifying, investigating and responding to cyber security incidents, helping to protect critical systems, data and services. This role would suit an analytical and motivated security professional who is confident working under pressure and communicating clearly with both technical and non-technical colleagues. You will monitor and assess security alerts, triage suspected incidents and carry out detailed investigations across endpoints, networks, cloud platforms and applications. Responsibilities will include analysing log data, identifying indicators of compromise, containing threats, supporting...

Learn more

Senior Cloud Incident Response Consultant

Added 29/10/2026

We are seeking a Senior Cloud Incident Response Consultant to lead the investigation, containment and resolution of complex security incidents across cloud environments. This is a senior technical role for an experienced incident responder who can work confidently under pressure, provide clear direction during critical events and help organisations strengthen their resilience against future threats. You will lead end-to-end incident response activities, from initial triage and scoping through containment, eradication, recovery and post-incident review. Working across cloud platforms, you will analyse identity and access activity, network traffic, workloads, endpoints, logs and other sources of forensic evidence. You will develop and...

Learn more

Product Security Incident Response Program Manager (m/f/d)

Added 29/10/2026

We are seeking a Product Security Incident Response Programme Manager (m/f/d) to lead the planning, coordination and continuous improvement of our response to product security incidents. In this role, you will help protect customers, products and services by ensuring that security vulnerabilities and incidents are assessed, managed and resolved efficiently across a complex, international environment. You will own and develop the product security incident response framework, including policies, processes, playbooks, escalation paths and communication procedures. Working closely with product security, engineering, software development, legal, communications, privacy and customer-facing teams, you will coordinate the end-to-end response to incidents, from initial triage...

Learn more

Consultant, Senior Consultant, Cyber Incident Response Advisory, Recovery and Resilience

Added 26/10/2026

We are seeking experienced professionals to join a cyber incident response advisory, recovery and resilience team. Opportunities are available at Consultant and Senior Consultant level for individuals who can help clients prepare for, respond to and recover from significant cyber security incidents. You will work with a broad range of stakeholders, supporting organisations in strengthening their ability to withstand disruption and maintain critical services. You will contribute to incident response engagements, including assessing the impact of cyber attacks, supporting containment and recovery activities, coordinating technical and business workstreams, and helping clients return to normal operations. You will also assist with...

Learn more

Consultant, Senior Consultant, Cyber Incident Response Advisory, Recovery and Resilience

Added 26/10/2026

We are seeking experienced professionals to join a Cyber Incident Response Advisory, Recovery and Resilience team at Consultant and Senior Consultant level. This is an opportunity to support clients in preparing for, responding to and recovering from complex cyber incidents, while helping them strengthen their long-term resilience. You will work with organisations across a range of sectors to assess their cyber incident response capabilities, identify vulnerabilities and develop practical strategies for managing disruption. Responsibilities may include supporting incident response engagements, conducting readiness assessments, reviewing crisis management arrangements and contributing to post-incident lessons-learned reviews. You will also help clients develop and...

Learn more

Manager, Cyber Incident Response Advisory, Recovery and Resilience

Added 23/10/2026

We are seeking a Manager, Cyber Incident Response Advisory, Recovery and Resilience to lead the development and delivery of effective cyber incident preparedness, response and recovery capabilities. This role will provide expert guidance to stakeholders across the organisation, helping to strengthen resilience against cyber threats and minimise operational impact when incidents occur. You will advise on cyber incident response plans, crisis management processes and recovery strategies, ensuring they remain practical, proportionate and aligned with business priorities. Responsibilities will include coordinating scenario-based exercises, facilitating post-incident reviews, identifying lessons learned and tracking improvement actions through to completion. You will also support the...

Learn more

Manager, Cyber Incident Response Advisory, Recovery and Resilience

Added 23/10/2026

We are seeking an experienced Manager, Cyber Incident Response Advisory, Recovery and Resilience to lead the development and delivery of effective cyber incident preparedness, response and recovery capabilities. This is an influential role for a professional who can combine technical understanding with strong stakeholder management, helping teams prepare for, respond to and learn from significant cyber events. You will provide expert advice on incident response, business continuity, disaster recovery and operational resilience. Working closely with technology, security, risk, legal, compliance and business teams, you will assess current capabilities, identify vulnerabilities and develop practical improvements that support a coordinated response to...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.