Cyber Incident Lead - High-Impact Response

NVISO GmbH; Brussel; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Training budget

Company car

Flexible hours

Home working

Job summary

NVISO GmbH is seeking a Cyber Incident Manager to lead responses to high-impact security incidents. You will own the full lifecycle from triage to recovery and report to senior stakeholders, coordinating across technical and business streams for timely, concrete actions.

The role requires 5+ years in cybersecurity or crisis management, strong leadership, and the ability to translate complex findings into practical guidance.

Qualifications

• 5+ years of relevant experience in cybersecurity, incident response, or crisis management.
• Ability to explain technically complex matters for varied stakeholders.
• Proven experience leading cyber incidents, including triage, containment, and post-incident review.
• Strong stakeholder-management and leadership during stressful situations.
• Customer-facing consulting maturity and risk-based decision making.
• Dutch and/or French and English at C1+ proficiency.

Responsibilities

• Act as Incident Lead during active engagements, coordinating the technical response team and steering decisions on containment, eradication, recovery, evidence preservation, and business continuity.
• Assess incoming incidents, determine severity and impact, and activate the right people and escalation paths quickly.
• Run customer and internal incident calls, establish a war-room cadence, and maintain incident timeline and action tracker.
• Serve as primary point of contact for customer leadership, delivering concise, factual updates on situation, impact, and next steps.
• Produce high-quality incident deliverables, including executive updates, status reports, and root-cause analysis.
• Ensure response follows agreed framework, scope, evidence-handling, and regulatory obligations.
• Coordinate with legal, privacy, risk, communications, and external specialists as needed; support regulatory reporting by identifying facts and timelines.
• Balance technical urgency with operational realities to enable defensible risk-based decisions on isolation and recovery.
• Mentor incident-response team members, delegate work, remove blockers, and maintain wellbeing during high-pressure incidents.
• Collaborate with cloud providers, MSPs, insurers, counsel, PR advisers, and law enforcement as involved.
• Maintain traceable incident documentation and ensure decisions and actions are recorded.
• Lead post-incident reviews and convert findings into improvements to playbooks and readiness services.
• Identify patterns and weaknesses; recommend pragmatic security enhancements to reduce future risks.
• Contribute to NVISO’s incident-management methodology, templates, and crisis communications approach.
• Support tabletop exercises and executive briefings to improve readiness.
• Stay current on threat activity and regulatory developments; apply insights to guidance for customers.

Skills

Incident management

Stakeholder management

Cybersecurity

Communication

Leadership

Regulatory awareness

Job description

NVISO GmbH is seeking a Cyber Incident Manager to lead responses to high-impact security incidents. You will own the full lifecycle from triage to recovery and report to senior stakeholders, coordinating across technical and business streams for timely, concrete actions.

The role requires 5+ years in cybersecurity or crisis management, strong leadership, and the ability to translate complex findings into practical guidance.