Incident Manager (UAE)

Outbreach Ltd.; United Arab Emirates; Remote; AED 300,000 - 340,000; Full time

Job summary

Outbreach Ltd. is seeking an Incident Manager in the United Arab Emirates for remote work. The role focuses on coordinating cyber incident response, documenting triage details, and ensuring timely actions across stakeholders.

Candidates should have IT/InfoSec experience and exposure to incident management standards. The position requires excellent communication in English, familiarity with TTPs, and the ability to manage multiple incidents when needed.

Qualifications

• Experience in cyber incident response teams.
• 3+ years IT or information security support experience.
• Knowledge of ITIL or similar incident management methodologies.
• Strong written and spoken English.
• Experience in high pace, high pressure environments and incidents/crises.

Responsibilities

• Serve as SME on incident response processes and procedures.
• Capture and document information from triage calls into standardised documentation.
• Maintain the incident log and ensure deadlines are met.
• Ensure smooth flow of information across involved parties.
• Manage logistics of an incident (meetings, equipment, travel).
• Highlight blockers and priorities and drive resolution.
• Prepare reports and disseminate deliverables.
• Own and operate systems critical to incident operations (ticketing, monitoring).
• Develop and refine incident management processes during/after incidents.

Skills

Incident response

Communications

English proficiency

ITIL

Crisis management

Documentation

Tools

SIEM

EDR

NDR

OSINT

Job description

United Arab Emirates (Remote) 300,000 AED On call

The Incident Manager (IM) is the glue who holds together all other teams and stakeholders in a cyber incident. You can think of this role like a project manager but in a critical and fast-moving incident.The IM will be expected to ensure all the other stakeholders know what is expected of them and ensure they are held accountable for their activities.The IM with be extremely detail orientated and comfortable with ensuring processes are appropriately followed and progressed as needed during the incident and quickly raising any challenges to the relevant owner.IMs will generally only be working on one incident at a time though in some circumstances you may be asked to oversee multiple incidents concurrently which will involve heightened diligence.

Key Responsibilities

• Serving as the subject matter expert on incident response process and procedures.
• Capturing and documenting all information from triage calls into standardised documentation.
• Maintaining the incident log and ensuring key actions and deadlines are met.
• Ensuring the smooth and timely flow of information and communication across all involved.
• Managing the logistics of an incident such as ensuring meetings are scheduled, software/equipment is provided, travel is arranged etc.
• Highlighting blockers or problems and ensuring they are appropriately prioritised.
• Supporting the incident resolution efforts.
• Preparing reports, providing notifications, and disseminating deliverables.
• Owning and operating any system critical to the operations of the incident (e.g. ticketing, monitoring, etc)
• Developing and refining the incident management processes as necessary during and after incidents. Learning and improving continuously.

Skills & Experience

• Preference will be given to candidates with prior experience in cyber incident response teams.
• 3+ Years Information Technology or Information Security support experience.
• Working knowledge of Public Relations, Communications, Marketing and Law.
• Excellent telephone/video conference mannerisms and communication skills.
• Very strong verbal and written English, particularly spelling, grammar and style.
• Good understanding of cyber security including TTPs (Tactics, Techniques & Procedures), common tools and industry stakeholders.
• Formal document and report creation for senior executives and external clients.
• Experience within high pace, high pressure environments and desire to work in incidents and crisis management.
• ITIL or other similar incident management methodologies

Highly Desirable but not Vital

• In-depth experience with regulations and legislation such as GDPR, HIPAA, DORA and other data or privacy laws.
• Frameworks and governance such as NIST, SOCII, ISO27001 etc.
• Security certification such as CEH, CCNA, OSCP, GCIH etc
• Security tools/practices such as SIEM, EDR, NDR, OSINT etc
• Security clearance.

Commitment

As a 'bench' Incident Manager you will be called whenever a suitable incident is raised by our clients which matches with your skill and experience level.

There is no expectation for you to remain on call or for you to accept any incident when you are not available. However, once you commit to an incident you will become a key member of the response team and will be expected to remain engaged for the duration of the incident. At the least this would be for 1 day, but in most cases will likely be for 2-4 weeks.

Full training and support will be provided to successful candidates who will be expected to attend regular (paid) meetings to ensure they are familiar with the company, its methodologies and market.

• Hybrid working with much of your work being done where you please.
• Flexible hours that can be scaled up or down as suits you.
• Working in an expanding Cyber Security business where you can grow in your career and where you can help shape the business.
• Training and development budget aligned to formal relevant qualifications.
• Hourly pay equivalent to over AED 300,000pa with a significant increase for unsociable hours - if needed.
• Eligible for company stock options (subject to minimum hours).