Senior Incident Response Leader — AI-Driven Cyber Crisis

Grant Thornton Australia; Sydney; On-site; AUD 180,000 - 280,000; Full time

Job summary

Grant Thornton Australia is expanding its incident response capability with a commercially astute Senior Manager to lead it on the ground. You will oversee end-to-end client engagements, coordinate across executives, legal, insurers and technical teams, and help build a differentiated service within a global cyber network.

If you have led major incidents, stayed calm under pressure and have strong reporting skills, this role offers leadership, growth and the chance to shape the practice across

Qualifications

• Significant experience leading cyber security incident response.
• Hands-on depth across incident management, forensics, threat intel and hunting.
• Experience with platforms and tooling behind modern detection/response.
• Strong understanding of incident response frameworks and Australian obligations.
• Proven leadership and team development experience.
• Experience coordinating with executives, legal, insurers and third parties.
• Calm under pressure with crisis communications skills.
• Strong writing and executive reporting ability.
• Commercial awareness of engagement scoping, pricing and delivery.
• Willingness to travel and participate in on-call roster.

Responsibilities

• Lead client incident response engagements end to end from triage to recovery.
• Act as incident lead and escalation point for major incidents with cross‑functional teams.
• Coordinate response with executives, legal, insurers and MSSPs.
• Mentor a team of incident response professionals across disciplines.
• Manage investigations with proper staffing and documentation.
• Prepare technical reports and executive summaries for boards.
• Use threat intel and proactive hunting to anticipate threats.
• Assist clients with readiness plans, playbooks and tabletop drills.
• Shape automation and AI-enabled workflows with human oversight.
• Build client relationships and contribute to proposals and retainers.

Skills

Incident leadership

Incident management

Threat intel

Digital forensics

Australia regs

Team leadership

Executive reporting

Client communications

Commercial awareness

On-call readiness

Travel willingness

Job description

Grant Thornton Australia is expanding its incident response capability with a commercially astute Senior Manager to lead it on the ground. You will oversee end-to-end client engagements, coordinate across executives, legal, insurers and technical teams, and help build a differentiated service within a global cyber network.

If you have led major incidents, stayed calm under pressure and have strong reporting skills, this role offers leadership, growth and the chance to shape the practice across