Cyber Incident & Preparedness Lead

BT Group; West of England; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Annual bonus 10%

Private GP 24/7 for you and family

Carers leave up to 2 weeks

BT product discounts

Pension scheme 5% + 10% employer

Holiday purchase scheme

Job summary

BT Group is seeking a Cyber Security Principal to lead incident response and cyber preparedness efforts across Bristol or Manchester. You will coordinate containment, remediation and recovery during major cyber incidents, while driving readiness programs and cross‑functional exercises.

The role requires 3+ years in cyber security operations, strong data interpretation for risk, and proven collaboration with senior stakeholders.

Qualifications

• Experience in coordinating high‑pressure cyber incidents and driving containment actions.
• Ability to interpret data to assess risk and inform decisions.
• Proven ability to communicate clearly with senior leaders and cross‑functional teams.

Responsibilities

• Coordinate Priority 3 to Priority 1 cyber incident response activities.
• Maintain BT’s readiness through cyber preparedness activities and exercises.
• Lead the Security Bronze‑level incident management processes within the Business Continuity framework.
• Deliver BT Cyber Exercising Programme across units and stakeholders.
• Conduct cyber preparedness training, awareness and engagement activities.
• Develop and report cyber preparedness metrics, KPIs and MI for informed decisions.

Skills

Incident response

Stakeholder engagement

Decision making

Cross-functional collaboration

Leadership

Communication skills

Growth mindset

Education

Bachelor's degree in a relevant field

Job description

BT Group is seeking a Cyber Security Principal to lead incident response and cyber preparedness efforts across Bristol or Manchester. You will coordinate containment, remediation and recovery during major cyber incidents, while driving readiness programs and cross‑functional exercises.

The role requires 3+ years in cyber security operations, strong data interpretation for risk, and proven collaboration with senior stakeholders.