Senior Cybersecurity Incident Lead

McKesson; Cork; On-site; EUR 66,000 - 110,000; Full time

Job summary

McKesson seeks a Senior Incident Coordinator to lead coordination and communication of complex cybersecurity incidents across the enterprise. You will act as a central point during high-priority events, aligning security, technology, and business teams to drive a timely response.

The role emphasizes crisis leadership, clear written incident communications, and strong stakeholder management, with opportunities to shape incident playbooks and tabletop exercises.

Qualifications

• 7+ years of progressive experience in cybersecurity, incident response, crisis management, security operations, business continuity, or related field.
• Experience coordinating complex cybersecurity incidents involving multiple technical and business stakeholder groups.
• Experience managing incident communications, stakeholder updates, escalation, action tracking, and response coordination during high-priority events.
• Demonstrated ability to communicate effectively with technical teams, business stakeholders, and senior leadership during time-sensitive situations.
• Strong technical writing experience, including incident timelines, reports, briefings, playbooks, lessons learned, and other structured incident documentation.
• Experience translating complex cybersecurity information into clear, concise, non-technical communications.
• Experience supporting or facilitating tabletop exercises, incident simulations, preparedness activities, or post-incident reviews.
• Working knowledge of cybersecurity incident response processes and terminology sufficient to effectively coordinate technical response activities.

Responsibilities

• Lead the coordination of complex cybersecurity incidents, establishing response structure, communication cadence, stakeholder alignment, action tracking, and escalation paths.
• Serve as a central point of coordination during high-priority incidents, bringing together security, technology, business, legal, communications, vendors, and other stakeholders as appropriate.
• Coordinate incident bridges, working sessions, and communication channels, ensuring actions, decisions, owners, dependencies, and next steps remain clear throughout the response.
• Develop and maintain accurate incident documentation, including timelines, decision logs, action trackers, incident summaries, post-incident reports, and lessons learned.
• Draft clear, audience-appropriate incident communications, translating complex cybersecurity developments into concise updates for executives, business stakeholders, and broader internal audiences.
• Partner with technical response teams to understand investigation findings, business impact, containment, remediation, and recovery status and translate those findings into coordinated actions and communications.
• Plan and facilitate tabletop exercises, simulations, and incident response drills to strengthen organizational preparedness and cross-functional coordination.
• Lead or support post-incident reviews and after-action activities, identifying opportunities to strengthen processes, communications, documentation, and organizational readiness.
• Develop and maintain incident coordination playbooks, communication templates, escalation procedures, and supporting readiness materials.

Skills

Incident response

Crisis management

Security operations

Business continuity

Stakeholder management

Technical writing

Tabletop exercises

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Business, Communications, or equivalent

Tools

SIEM

EDR/XDR

SOAR

Cloud security

Network security

Identity security

Job description

McKesson seeks a Senior Incident Coordinator to lead coordination and communication of complex cybersecurity incidents across the enterprise. You will act as a central point during high-priority events, aligning security, technology, and business teams to drive a timely response.

The role emphasizes crisis leadership, clear written incident communications, and strong stakeholder management, with opportunities to shape incident playbooks and tabletop exercises.