Cyber Incident Manager

Experis (Austria); Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

Experis (Austria) seeks an experienced Cyber Incident Manager to join a high-profile programme supporting a secure government environment. You will lead coordination and resolution of cyber security incidents, ensuring rapid response, stakeholder engagement, and continuous service improvement.

The role requires proactive leadership, strong communication, and extensive experience in managing complex cyber incidents in regulated environments with active SC clearance.

Qualifications

• Minimum 5 years in Cyber Security, Incident Management or Security Operations.
• Proven experience leading cyber incidents from initiation to resolution.
• Strong knowledge of incident response methodologies and frameworks.
• Experience with SIEM, EDR and threat intel platforms.
• Excellent stakeholder management and communication skills.

Responsibilities

• Lead end-to-end management of cyber security incidents and major security events.
• Coordinate technical response teams to contain, eradicate and recover.
• Act as primary point of contact for incident communications and updates.
• Facilitate incident response bridges and war-room activities during incidents.
• Prioritise, investigate, document and escalate incidents as needed.
• Produce post-incident reports, lessons learned, and root cause analyses.
• Work with SOC, security analysts, infra teams and vendors.
• Monitor incident trends and suggest improvements to cyber resilience.
• Help develop incident response playbooks and procedures.
• Ensure compliance with security policies and best practices.

Skills

Cyber security

Incident management

Stakeholder management

Communication skills

Team coordination

Executive reporting

Analytical thinking

Problem solving

SOC collaboration

SC clearance

Education

CISSP

CISM

GCIH

CompTIA Security+

Tools

SIEM

EDR

Threat intelligence platforms

Job description

Location: London Job Type: Contract Industry: Cyber Security Job reference: BBBH449651_1792015144 Posted: about 12 hours ago

Duration: 5 Months

Location: UK Remote

Active SC clearance required due to project restrictions

Overview

We are seeking an experienced Cyber Incident Manager to join a high-profile programme supporting a secure government environment. The successful candidate will lead the coordination, management, and resolution of cyber security incidents, ensuring rapid response, stakeholder engagement, and continuous service improvement.

This role requires a proactive individual with strong communication skills, experience managing complex cyber incidents, and the ability to operate effectively within secure and highly regulated environments.

Key Responsibilities

• Lead the end-to-end management of cyber security incidents and major security events.
• Coordinate technical response teams during security incidents, ensuring timely containment, eradication, and recovery activities.
• Act as the primary point of contact for cyber incident communications and stakeholder updates.
• Facilitate incident response bridges and war-room activities during critical incidents.
• Ensure incidents are appropriately prioritised, investigated, documented, and escalated.
• Produce post-incident reports, lessons learned documentation, and root cause analysis findings.
• Work closely with Security Operations Centres (SOC), security analysts, infrastructure teams, and third-party suppliers.
• Monitor incident trends and provide recommendations for improving cyber resilience.
• Support the development and enhancement of incident response processes, playbooks, and procedures.
• Ensure compliance with organisational security policies and industry best practices.
• Active SC Clearance.
• Minimum 5 years' experience within Cyber Security, Incident Management, or Security Operations environments.
• Proven experience leading and managing cyber security incidents from initiation through to resolution.
• Strong knowledge of incident response methodologies and cyber security frameworks.
• Experience working with SIEM, EDR, and threat intelligence platforms.
• Excellent stakeholder management and communication skills.
• Ability to coordinate multiple technical teams during high-pressure incidents.
• Strong analytical and problem-solving skills.
• Experience producing executive-level incident reports and recommendations.
• Certifications such as CISSP, CISM, GCIH, CompTIA Security+, or equivalent.
• Experience within Government, Defence, National Security, or Critical National Infrastructure sectors.
• Knowledge of NIST, ISO 27001, Cyber Essentials, and NCSC guidance.
• Experience working within Security Operations Centres (SOC).