Senior Security Incident Manager

Bloomberg; City Of London; Presencial; GBP 90.000 - 130.000; Jornada completa

Descripción de la vacante

Bloomberg is seeking a Security Incident Management professional to coordinate responses to security incidents and high-profile events across its global network. The role emphasizes leadership, delegation, documentation, and defining required response actions rather than deep technical analysis.

You will serve in incident management roles such as Incident Commander or Manager during active incidents, ensuring containment, remediation, and clear communication with stakeholders and senior

Formación

• Experience in cyber security incident management lifecycle (prep, identify, contain, eradicate, recover, post-incident review).
• Proven ability to lead under pressure and coordinate cross-team responses.
• Strong written and verbal communication skills suitable for executive audiences.
• Ability to document status, track metrics, and report updates to stakeholders.

Responsabilidades

• Command and coordinate responses to security incidents and high-profile events.
• Scope actions, delegate tasks, and ensure timely closure or handoff.
• Maintain incident management procedures and playbooks; participate in PIRs.
• Collaborate with global Sec IM teams (NY, Dublin, Sydney) to ensure consistency.

Conocimientos

Incident management

Leadership

Communication

Multitasking

Stakeholder management

Decision making

Descripción del empleo

We Protect Bloomberg. The Bloomberg Security Incident Management (Sec IM) team provides consistent coordination and management of information security incidents and events across Bloomberg's diverse lines of business and vast global network.

What is the team?

Sec IM works closely with teams across Bloomberg, coordinating, commanding, and documenting responses for all security incidents and high-profile security events. The team is responsible for ensuring responses are efficient and comprehensive. The team also plays a key role in identifying methods to improve upon similar scenarios. Key partners include incident responders, threat intelligence, legal, vulnerability analysts, security program leads, and many other teams within the company.

What is the role?

A successful candidate will be focused on coordination, leadership, delegation, documentation, and identification of required response actions, rather than performing technical deep dives such as forensics or reverse engineering. You will be expected to fulfill common incident management roles in a security context where the goal is careful containment and remediation of incidents and events which could jeopardize the confidentiality, integrity, and/or availability of Bloomberg systems and records.

We'll trust you to:

• Demonstrate clear and calm leadership, setting the tone for each response
• Command and coordinate a response to security incidents, relevant threats, and high-profile security events
• Scope a response to the next best actions
• Ensure response is sustainable for all resources involved
• Support beyond normal hours in an emergency or during times of staff shortage
• Coordinate & communicate
• Delegate tasks in a timely manner and manage them to closure or management handoff
• Facilitate incident / threat resolution through prompt communication across multiple teams
• Document status and regularly communicate updates to stakeholders and senior management
• Maintain and track key metrics and providing reporting related to incident management
• Work closely with global Sec IM staff (New York, Dublin, Sydney), ensuring continuous involvement
• Update and maintain procedures that effectively guide security incident management
• Participate in skill training
• Conduct Post Incident Review (PIR) to identify paths for improving response to similar scenarios, as well as security posture, delivering those requirements to appropriate stakeholders that handle short-, mid- and long-term remediation

You’ll need to have:

• 3+ years working in a cyber incident management, cyber incident response, or urgent vulnerability remediation function(s)
• Understanding of the security incident lifecycle, including preparation, identification, containment, eradication, recovery, and post-incident review
• Experience acting as an Incident Commander, Incident Manager, or equivalent leadership role during an active security incident
• Proven ability to manage tasks during high-pressure, complex situations
• Clear and concise written and verbal communication skills
• Strong critical thinking and decision-making skills
• Ownership to identify problems and pursue solutions, individually and collaboratively
• Commitment to building strong people networks and collaborative relationships
• Effectiveness at using multiple communication styles during incidents
• Proven ability to multitask

We would love to see:

• Experience with developing, maintaining, or improving incident management procedures, playbooks, or operational frameworks
• Experience communicating risk and incident status to senior leadership and executive stakeholders
• Experience designing and facilitating incident tabletop exercises and simulations
• Knowledge or experience in risk assessment, business impact, or operational awareness
• Ability to explain complex topics in accessible language
• Commitment to develop team members’ skills

Bloomberg is an equal opportunity employer, and we value inclusion at our company. We do not discriminate on the basis of age, ancestry, color, gender identity or expression, genetic predisposition or carrier status, marital status, national or ethnic origin, race, religion or belief, sex, sexual orientation, sexual and other reproductive health decisions, parental or caring status, physical or mental disability, pregnancy or maternity/parental leave, protected veteran status, status as a victim of domestic violence, or any other classification protected by applicable law.

Bloomberg provides reasonable adjustment/accommodation to qualified individuals with disabilities. Please tell us if you require a reasonable adjustment/accommodation to apply for a job or to perform your job. Examples of reasonable adjustment/accommodation include but are not limited to making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you would prefer to discuss this confidentially, please email [e-mail] (Americas), [e-mail] (Europe, the Middle East and Africa), or [e-mail] (Asia-Pacific), based on the region you are applying for.

If indicated, please note that years of experience are a guide; we will consider applications from all candidates who can demonstrate the skills necessary for the role.

Discover what makes Bloomberg unique - watch our podcast series for an inside look at our culture, values, and the people behind our success.