Cyber Incident Manager

Experis; Greater London; Sur place; GBP 92 000 - 101 000; Plein temps

Résumé du poste

Experis is seeking an experienced Cyber Incident Manager for a high-profile programme supporting a secure government environment. The role will lead end-to-end cyber security incident management, coordinating response efforts across SOC, infrastructure teams, and vendors, with a strong focus on timely containment and remediation.

The successful candidate will drive incident response playbooks, produce executive summaries, and ensure adherence to security policies in a highly regulated setting.

Qualifications

• Active SC Clearance is mandatory.
• Minimum 5 years' experience in Cyber Security, Incident Management, or Security Operations environments.
• Proven experience leading cyber security incidents from initiation to resolution.
• Strong knowledge of incident response methodologies and cyber security frameworks.
• Experience working with SIEM, EDR, and threat intelligence platforms.
• Excellent stakeholder management and communication skills.
• Ability to coordinate multiple technical teams during high-pressure incidents.
• Experience producing executive-level incident reports and recommendations.

Responsabilités

• Lead end-to-end management of cyber security incidents and major security events.
• Coordinate technical response teams to contain, eradicate, and recover during incidents.
• Act as primary point of contact for cyber incident communications and stakeholder updates.
• Facilitate incident response bridges and war-room activities during critical incidents.
• Ensure incidents are prioritized, investigated, documented, and escalated.
• Produce post-incident reports, lessons learned, and root cause analyses.
• Collaborate with SOC, security analysts, infra teams, and third-party suppliers.
• Monitor incident trends and recommend improvements to cyber resilience.
• Support development of incident response playbooks and procedures.
• Ensure compliance with security policies and best practices.

Connaissances

Active SC Clearance

Cyber Security

Incident Management

Stakeholder Management

SIEM

EDR

Incident Response

Executive Reporting

Threat Intelligence

Communication

Outils

SIEM

EDR

Threat Intelligence Platforms

Description du poste

Role: Cyber Incident Manager

Duration: 5 Months

Location: UK Remote

Day Rate: £500 Inside IR35

Active SC clearance required due to project restrictions

Overview

We are seeking an experienced Cyber Incident Manager to join a high-profile programme supporting a secure government environment. The successful candidate will lead the coordination, management, and resolution of cyber security incidents, ensuring rapid response, stakeholder engagement, and continuous service improvement.

This role requires a proactive individual with strong communication skills, experience managing complex cyber incidents, and the ability to operate effectively within secure and highly regulated environments.

Key Responsibilities

• Lead the end-to-end management of cyber security incidents and major security events.
• Coordinate technical response teams during security incidents, ensuring timely containment, eradication, and recovery activities.
• Act as the primary point of contact for cyber incident communications and stakeholder updates.
• Facilitate incident response bridges and war‑room activities during critical incidents.
• Ensure incidents are appropriately prioritised, investigated, documented, and escalated.
• Produce post‑incident reports, lessons learned documentation, and root cause analysis findings.
• Work closely with Security Operations Centres (SOC), security analysts, infrastructure teams, and third‑party suppliers.
• Monitor incident trends and provide recommendations for improving cyber resilience.
• Support the development and enhancement of incident response processes, playbooks, and procedures.
• Ensure compliance with organisational security policies and industry best practices.

Essential Skills & Experience

• Active SC Clearance.
• Minimum 5 years' experience within Cyber Security, Incident Management, or Security Operations environments.
• Proven experience leading and managing cyber security incidents from initiation through to resolution.
• Strong knowledge of incident response methodologies and cyber security frameworks.
• Experience working with SIEM, EDR, and threat intelligence platforms.
• Excellent stakeholder management and communication skills.
• Ability to coordinate multiple technical teams during high-pressure incidents.
• Strong analytical and problem‑solving skills.
• Experience producing executive‑level incident reports and recommendations.

Desirable Skills

• Certifications such as CISSP, CISM, GCIH, CompTIA Security+, or equivalent.
• Experience within Government, Defence, National Security, or Critical National Infrastructure sectors.
• Knowledge of NIST, ISO 27001, Cyber Essentials, and NCSC guidance.
• Experience working within Security Operations Centres (SOC).