Cyber Incident Response Manager
A major critical infrastructure business is looking for a Cyber Incident Response Manager to lead a small cyber team across incident response, data protection and vulnerability management. This is a good opportunity for someone who enjoys being close to the action, leading through high-pressure cyber events, and improving the way cyber operations functions day to day.
The main focus of the role is Incident Response leadership. You do not need to be the deepest hands-on specialist across DLP and Vulnerability Management, but you will need enough technical understanding to manage SMEs, ask the right questions, challenge thinking where needed, and keep operational activity moving. You will work closely with senior cyber leadership and play an important role in improving response capability, operational structure and team maturity across a complex environment.
About the Role
- Lead, coach and support a small cyber team across Incident Response, DLP and Vulnerability Management.
- Take ownership of major cyber incidents across assessment, containment, recovery, reporting and post-incident review.
- Provide calm, structured leadership during high-pressure cyber events, bringing the right people together and keeping communication clear.
- Improve incident response processes, playbooks, escalation pathways, tabletop exercises and reporting.
- Oversee DLP and Vulnerability Management activity, working with internal SMEs and stakeholders to improve controls, prioritisation and operational outcomes.
- Prepare clear updates for senior stakeholders, including incident summaries, root cause analysis, vulnerability reporting and operational recommendations.
About You
- Proven experience in cyber security operations, incident response, cyber defence or a related security leadership role.
- Experience leading or coordinating cyber incidents in a complex business environment.
- Comfortable leading a small team and managing technical specialists across different security domains.
- Practical exposure to DLP, Insider Threat, Vulnerability Management, security monitoring, threat detection or similar cyber operations functions.
- Calm under pressure, structured in your thinking, and able to communicate clearly with both technical and non-technical stakeholders.
- Critical infrastructure, energy, utilities, financial services, government or other regulated industry experience would be highly regarded.
This is a strong opportunity to join a well-known organisation with a mature cyber function, supportive leadership and genuine visibility across the business. If you are interested in a confidential discussion, please apply or reach out directly.
