London Cyber Security Lead – Incident Response

Cyber UK; Greater London; Hybrid; GBP 140,000 - 190,000; Full time

Benefits offered by this job

Hybrid working

Personal pension plan

Private medical and dental insurance

Bi-annual health assessments

Corporate gym memberships

Electric car lease programme

Childcare vouchers

Cycle-to-work

Season ticket loans

Volunteering opportunities

Job summary

EDF Trading in London seeks a senior cyber security leader to head the London-based team, act as Incident Commander, and align local delivery with global priorities. You will oversee Endpoint, Platform and Incident Response, managing risk-based prioritisation and coordinating with MDR providers and cross-functional partners.

Key requirements include strong incident response leadership, experience with EDR tooling, and governance across CABs, IT, Compliance and Legal.

Qualifications

• Led complex security initiatives end-to-end with multiple workstreams.
• Line-managed security/tech teams and managed performance.
• Led incident response with MDR providers and cross-functional teams.
• Experience with EDR tooling in production environments.
• Applied MITRE ATT&CK and ISO 27001/CIS/NIST controls.

Responsibilities

• Lead London cyber security team and act as Incident Commander.
• Coordinate local response with IT, Legal, Compliance and MDR.
• Assure delivery of globally-prioritised work in London.
• Own backlog prioritisation for Endpoint, Platform & Incident Response.
• Engage stakeholders and govern cyber security change in London.

Skills

Incident Command

Team Leadership

EDR tooling

MITRE ATT&CK

ISO 27001

Risk-based prioritisation

CAB governance

Security incident response

Cloud security

Tools

CrowdStrike

Job description

EDF Trading in London seeks a senior cyber security leader to head the London-based team, act as Incident Commander, and align local delivery with global priorities. You will oversee Endpoint, Platform and Incident Response, managing risk-based prioritisation and coordinating with MDR providers and cross-functional partners.

Key requirements include strong incident response leadership, experience with EDR tooling, and governance across CABs, IT, Compliance and Legal.