Lead Cyber Incident Response & Recovery

Cyber UK; Manchester; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

KPMG is seeking a Cyber Response & Recovery Manager (Reactive DFIR) to lead incident response cases within the CRS Team of the Cyber Advisory practice. You will manage investigations, perform forensics, and guide clients in threat containment and recovery while growing into a leadership role.

Role requires current SC or DV clearance or eligibility, with travel potential and on-call duties. Ideal candidates have strong technical and people skills to mentor junior staff and deliver high-quality

Qualifications

• Proven incident management experience across diverse cyber security incidents.
• Strong digital forensics background with incident response leadership.
• Willingness to travel and be on-call on rotation.
• Excellent communication and stakeholder-management skills.

Responsibilities

• Lead and coordinate cyber security incidents for clients as a case manager.
• Perform digital forensics analyses on disk, memory, network data and logs.
• Develop and refine in-house cyber-response tools and playbooks.
• Assess client incident response maturity and help stand up capabilities.
• Manage engagements end-to-end including scoping, budgeting, and deliverables.

Skills

Incident response

Digital forensics

Case management

Leadership

Security awareness

Education

Master's degree in Information Security

Cybersecurity degree or equivalent

Tools

Python

X-Ways

EnCase

FTK

Cellebrite

Windows/Linux

Job description

KPMG is seeking a Cyber Response & Recovery Manager (Reactive DFIR) to lead incident response cases within the CRS Team of the Cyber Advisory practice. You will manage investigations, perform forensics, and guide clients in threat containment and recovery while growing into a leadership role.

Role requires current SC or DV clearance or eligibility, with travel potential and on-call duties. Ideal candidates have strong technical and people skills to mentor junior staff and deliver high-quality