EMEA Incident Response Lead — Senior Director

Alvarez & Marsal; Greater London; Presencial; GBP 180 000 - 260 000; Tempo integral

Resumo da oferta

Alvarez & Marsal in London seeks a lead incident responder to run major cyber incidents end to end from London and shape EMEA capabilities. This hands-on role requires deep DFIR expertise and the ability to engage with the board, general counsel and sponsors under pressure.

Responsibilities include coordinating global responders, guiding legal and technical workstreams, and delivering evidence‑driven outcomes. Occasional travel across EMEA and readiness for out‑of‑hours work are expected.

Qualificações

• DFIR background and hands-on incident leadership experience across major cyber incidents including ransomware.
• Experience delivering investigations and forensic reports used in proceedings or regulator scrutiny.
• Comfort communicating with CEOs, general counsel and boards under pressure and in high‑stakes situations.
• Proven ability to coordinate cross‑border responders and manage time‑zone logistics.
• Established relationships with breach counsel and law firms instructing incident responses.
• Relevant certifications (GCFA, GCIH, GREM) or equivalent experience, and familiarity with CREST/NCSC CIR standards.

Responsabilidades

• Lead major cyber incidents end to end as incident commander, from triage to eradication and recovery.
• Mobilise and direct responders across time zones, coordinating technical, legal, communications and remediation workstreams.
• Run counsel‑instructed work through recover, investigate and litigate phases with evidential rigor.
• Lead the technical narrative in the room with board and GC/PE deal teams, enabling clear decision making.
• Collaborate with Forensic Technology, eDiscovery and Forensic Valuation teams on evidence preservation and readiness for testimony.
• Set incident playbooks, surge model, tooling and remediation approach for EMEA regulatory and operational needs.
• Mentor responders as the team grows and build relationships with partner firms.

Conhecimentos

DFIR expertise

Incident leadership

Ransomware experience

Evidence in proceedings

Board communication

Evidential standards

Surge team leadership

Travel willingness

Breach counsel relationships

Certifications

Descrição da oferta de emprego

Alvarez & Marsal in London seeks a lead incident responder to run major cyber incidents end to end from London and shape EMEA capabilities. This hands-on role requires deep DFIR expertise and the ability to engage with the board, general counsel and sponsors under pressure.

Responsibilities include coordinating global responders, guiding legal and technical workstreams, and delivering evidence‑driven outcomes. Occasional travel across EMEA and readiness for out‑of‑hours work are expected.