Security Incident Governance Lead

Sanderson Government & Defence; Inverness; On-site; GBP 92,000 - 111,000; Full time

Job summary

Sanderson Government & Defence is seeking a Security Operations Lead to govern and orchestrate security incident management across multiple suppliers. You will provide governance, assurance, and strategic oversight, ensuring incidents are escalated, evidenced, reviewed, and reported to the client through a controlled, audit-ready process without performing operational response activities.

The role requires SC clearance, 5 days onsite in Inverness or Preston, and an initial contract to

Qualifications

• Significant experience in Security Incident Management, Cyber Governance, Service Management, or GRC roles.
• Strong understanding of security incident lifecycles, major incident management, and security reporting.
• Experience working within complex multi-supplier environments.
• Strong stakeholder engagement and supplier management skills.
• Experience presenting incident risk information to senior stakeholders.
• Knowledge of CSF, NCSC guidance, ITIL Major Incident Management, ISO 27001.

Responsibilities

• Govern security incident governance across suppliers and define the incident management framework.
• Maintain incident classification criteria, escalation models, reporting standards, and major incident governance processes.
• Ensure alignment to client policies, regulatory obligations and security controls.
• Lead supplier governance and performance management for incident governance and escalation.
• Drive consistency in reporting, escalation, communications, and evidence standards.
• Provide executive oversight of incident risk and risk-based decision making.
• Produce consolidated incident reporting and dashboards across suppliers.
• Support audits, assurance reviews, and regulatory inspections.
• Coordinate Post Incident Reviews and ensure root cause analysis and corrective actions.

Skills

Security incident management

Cyber governance

Service management

GRC roles

Multi-supplier environments

Stakeholder engagement

Senior stakeholder communication

Job description

Sanderson Government & Defence is seeking a Security Operations Lead to govern and orchestrate security incident management across multiple suppliers. You will provide governance, assurance, and strategic oversight, ensuring incidents are escalated, evidenced, reviewed, and reported to the client through a controlled, audit-ready process without performing operational response activities.

The role requires SC clearance, 5 days onsite in Inverness or Preston, and an initial contract to