Senior Incident Response Leader: AI-Driven Crisis Management

Grant Thornton Australia Limited; Sydney; On-site; AUD 180,000 - 260,000; Full time

Benefits offered by this job

9‑Day fortnight

Job summary

Grant Thornton Australia Limited is growing its incident response capability for an AI-enabled threat landscape. We seek a commercially astute Senior Manager to lead on the ground, coordinate across executives, legal, insurers and technical teams, and deliver a truly differentiated incident response service within our global network.

You will guide end-to-end client engagements, mentor incident responders, and shape how automation strengthens detection and response while ensuring strong

Qualifications

• Significant experience leading cyber security incident response across consulting or in-house CSIRT/SEC OPS.
• Hands-on depth across incident management, digital forensics, threat intelligence and threat hunting.
• Experience with platforms and tooling behind modern detection and response.
• Strong understanding of incident response frameworks, best practice, and Australian regulatory obligations.
• Track record leading and developing teams with a client-facing focus.
• Experience working with executives, legal counsel, insurers and managed security service providers.
• Ability to stay calm under pressure and communicate cyber matters to non-technical stakeholders.
• Strong writing skills for technical reports and executive summaries.
• Commercial awareness of how incident response engagements and retainers are scoped and priced.
• Comfortable working in a team and building with others.
• Australian citizenship or permanent residency.
• Willingness to travel for client work and be on-call.
• Nice to have experience with cyber insurers or working with legal counsel on breach responses.
• Nice to have tabletop exercises or executive-level cyber crisis simulations.
• Nice to have professional certifications such as GCIH, GCFA, GCFE, GREM, CISSP or equivalent.

Responsibilities

• Lead client incident response engagements end to end, from triage and containment through eradication, recovery and post-incident review.
• Act as incident lead and senior escalation point for major client incidents, coordinating response across client teams, legal, insurers and MSPs.
• Work with client executives and crisis management teams, align incident response with business continuity and executive decision-making.
• Lead and mentor a team of incident response specialists across digital forensics, threat intelligence and threat hunting.
• Manage investigations with proper assignment and documentation in line with processes and frameworks.
• Prepare and review technical reports and executive summaries for boards and executives.
• Use threat intelligence and proactive hunting to help clients prepare for, prevent and identify threats.
• Help clients ready for incidents through readiness assessments, playbooks, escalation processes and tabletop exercises.
• Shape automation and AI-enabled workflows to strengthen detection and response with appropriate human oversight.
• Build client relationships and contribute to proposals, retainers and service delivery.
• Collaborate in a global network of incident response professionals while maintaining a locally relevant service.
• Contribute to practice development, playbooks, partner engagements and onboarding new people.
• Participate in on-call roster to support clients.

Job description

Grant Thornton Australia Limited is growing its incident response capability for an AI-enabled threat landscape. We seek a commercially astute Senior Manager to lead on the ground, coordinate across executives, legal, insurers and technical teams, and deliver a truly differentiated incident response service within our global network.

You will guide end-to-end client engagements, mentor incident responders, and shape how automation strengthens detection and response while ensuring strong