Global Cyber Incident Response Lead

Canopius; Sydney; Hybrid; AUD 90,000 - 130,000; Full time

Job summary

Canopius is seeking an Incident Responder for its Cyber Incident Management Team in Sydney. You’ll be the first point of contact for policyholders during cyber events, triaging severity and guiding containment and recovery.

Working in a global follow-the-sun model across Sydney, London and Chicago, you’ll coordinate with IR vendors, collaborate with Claims and Underwriting, and provide clear, calm communication to clients throughout incident response.

Qualifications

• Minimum two years in cybersecurity incident handling or response.
• Strong knowledge of cyber-attack methods and incident lifecycle.
• Ability to solve complex problems quickly under pressure.
• Excellent organizational skills with accuracy and thoroughness.
• Clear, concise communication for both technical and non-technical audiences.

Responsibilities

• Be the first point of contact for policyholder incident notifications.
• Rapidly triage, assess severity, and define the response plan and cadence.
• Orchestrate specialist vendors (IR firms, forensics, legal, PR) for right-sized support.
• Maintain timelines, decisions, and next steps throughout the incident.
• Provide calm, empathetic guidance and translate technical issues into business impact.
• Set milestones (containment, restoration, notifications) and manage costs.
• Conduct onboarding calls and explain notification processes and how the IR panel operates.
• Capture feedback to continuously improve service quality.

Skills

Incident response

Triage & escalation

Vendor coordination

Communication

Analytical thinking

Documentation

Tools

Excel

Power BI

SQL

Python

Job description

Canopius is seeking an Incident Responder for its Cyber Incident Management Team in Sydney. You’ll be the first point of contact for policyholders during cyber events, triaging severity and guiding containment and recovery.

Working in a global follow-the-sun model across Sydney, London and Chicago, you’ll coordinate with IR vendors, collaborate with Claims and Underwriting, and provide clear, calm communication to clients throughout incident response.