Senior Security Incident Manager

Bloomberg; Greater London; Hybrid; GBP 110,000 - 140,000; Full time

Job summary

Bloomberg is seeking a Senior Security Incident Manager to coordinate and lead security responses in EMEA from London or Dublin. The role focuses on containment, remediation, and ensuring clear, timely communication during critical incidents across Bloomberg's global networks and platforms.

You will work with incident responders, threat intelligence, legal, risk, and engineering teams; act as Incident Commander during active incidents; develop playbooks and run tabletop exercises; and drive

Qualifications

• 3+ years in cyber incident management or similar function.
• Understanding of security incident lifecycle and post-incident review.
• Experience as Incident Commander or equivalent leadership during incidents.
• Ability to manage tasks under pressure and coordinate multiple teams.
• Clear written and verbal communication skills.
• Strong analytical and problem-solving abilities.

Responsibilities

• Lead and coordinate responses to security incidents and threats.
• Scope actions and ensure sustainable resolutions across resources.
• Delegate tasks and drive them to closure.
• Document status and report updates to stakeholders and senior management.
• Collaborate with global Sec IM staff across New York, Dublin, and Sydney.
• Update procedures and participate in scenario analyses and training.
• Conduct post-incident reviews and drive remediation.
• Provide timely incident status to executives.

Skills

Incident management

Incident Commander

Leadership

Communication

multitask

Cyber security

Stakeholder management

Job description

Location
London
Business Area
Legal, Compliance, and Risk
Ref #
10054594

Description & Requirements

Senior Security Incident Manager
EMEA - London OR Dublin
We Protect Bloomberg. The Bloomberg Security Incident Management (Sec IM) team provides consistent coordination and management of information security incidents and events across Bloomberg's diverse lines of business and vast global network.

What is the team?

Sec IM works closely with teams across Bloomberg, coordinating, commanding, and documenting responses for all security incidents and high-profile security events. The team is responsible for ensuring responses are efficient and comprehensive. The team also plays a key role in identifying methods to improve upon similar scenarios. Key partners include incident responders, threat intelligence, legal, vulnerability analysts, security program leads, and many other teams within the company.

What is the role?

A successful candidate will be focused on coordination, leadership, delegation, documentation, and identification of required response actions, rather than performing technical deep dives such as forensics or reverse engineering. You will be expected to fulfill common incident management roles in a security context where the goal is careful containment and remediation of incidents and events which could jeopardize the confidentiality, integrity, and/or availability of Bloomberg systems and records.

We'll Trust You To

• Lead & focus
• Demonstrate clear and calm leadership, setting the tone for each response
• Command and coordinate a response to security incidents, relevant threats, and high-profile security events
• Scope a response to the next best actions
• Ensure response is sustainable for all resources involved
• Support beyond normal hours in an emergency or during times of staff shortage
• Coordinate & communicate
• Delegate tasks in a timely manner and manage them to closure or management handoff
• Facilitate incident / threat resolution through prompt communication across multiple teams
• Document status and regularly communicate updates to stakeholders and senior management
• Maintain and track key metrics and providing reporting related to incident management
• Work closely with global Sec IM staff (New York, Dublin, Sydney), ensuring continuous involvement
• Update and maintain procedures that effectively guide security incident management
• Participate in scenario analyses (e.g. tabletops, functional exercises, etc.)
• Participate in skill training
• Conduct Post Incident Review (PIR) to identify paths for improving response to similar scenarios, as well as security posture, delivering those requirements to appropriate stakeholders that handle short-, mid- and long-term remediation

You'll Need To Have

• 3+ years working in a cyber incident management, cyber incident response, or urgent vulnerability remediation function(s)
• Understanding of the security incident lifecycle, including preparation, identification, containment, eradication, recovery, and post-incident review
• Experience acting as an Incident Commander, Incident Manager, or equivalent leadership role during an active security incident
• Proven ability to manage tasks during high-pressure, complex situations
• Clear and concise written and verbal communication skills
• Strong critical thinking and decision-making skills
• Ownership to identify problems and pursue solutions, individually and collaboratively
• Commitment to building strong people networks and collaborative relationships
• Effectiveness at using multiple communication styles during incidents
• Proven ability to multitask

We Would Love To See

• Experience with developing, maintaining, or improving incident management procedures, playbooks, or operational frameworks
• Experience communicating risk and incident status to senior leadership and executive stakeholders
• Experience designing and facilitating incident tabletop exercises and simulations
• Knowledge or experience in risk assessment, business impact, or operational awareness
• Ability to explain complex topics in accessible language
• Commitment to develop team members’ skills

Bloomberg is an equal opportunity employer, and we value inclusion at our company. We do not discriminate on the basis of age, ancestry, color, gender identity or expression, genetic predisposition or carrier status, marital status, national or ethnic origin, race, religion or belief, sex, sexual orientation, sexual and other reproductive health decisions, parental or caring status, physical or mental disability, pregnancy or maternity/parental leave, protected veteran status, status as a victim of domestic violence, or any other classification protected by applicable law.

Bloomberg provides reasonable adjustment/accommodation to qualified individuals with disabilities. Please tell us if you require a reasonable adjustment/accommodation to apply for a job or to perform your job. Examples of reasonable adjustment/accommodation include but are not limited to making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you would prefer to discuss this confidentially, please email [e-mail] (Americas), [e-mail] (Europe, the Middle East and Africa), or [e-mail] (Asia-Pacific), based on the region you are applying for.

If indicated, please note that years of experience are a guide; we will consider applications from all candidates who can demonstrate the skills necessary for the role.

Discover what makes Bloomberg unique - watch our for an inside look at our culture, values, and the people behind our success.