Incident Response Manager

Placements24; Queenstown; On-site; NZD 106,000 - 149,000; Full time

Benefits offered by this job

Relocation assistance may be available

Medical aid

Retirement fund benefits

Generous annual and sick leave

Advanced training and professional dev

Supportive leadership and team

Job summary

Placements24 seeks an experienced Incident Response Manager to lead a cybersecurity IR team at our client’s Queenstown site. You will develop and manage the IR plan, coordinate reactions to security breaches, and communicate with stakeholders across the organization.

You’ll oversee detection, containment, eradication and recovery, conduct post-incident reviews, and liaise with external agencies. A strong leader with hands-on IR, forensic and malware analysis skills is essential.

Qualifications

• 7+ years in cybersecurity with at least 3 years in a leadership/management role focused on incident response.
• Proven experience developing and executing IR plans in complex environments.
• Deep understanding of IR methodologies, forensic and malware analysis.
• Strong knowledge of network security, OS and common attack vectors.
• Excellent leadership, communication, and decision-making under pressure.
• Experience with SIEM, IDS/IPS, and related security monitoring tools.
• Certs such as CISSP, CISM, GCFE or GCFA are highly desirable.

Responsibilities

• Develop, maintain, and test the IR plan.
• Lead IR team during incidents with coordination and clear communication.
• Oversee detection, analysis, containment, eradication and recovery phases.
• Conduct post-incident reviews and implement improvements.
• Maintain relationships with external agencies for IR support.
• Manage security monitoring tools and timely reporting of events.
• Deliver IR training and tabletop exercises.
• Stay updated on threats, vulnerabilities and IR techniques.
• Ensure compliance with legal/regulatory incident reporting requirements.

Skills

Incident response leadership

Communication under pressure

Decision-making

Team leadership

Forensic analysis

Malware analysis

Threat awareness

Education

Bachelor's degree in Computer Science, Cybersecurity, or a related field

Master's degree preferred

Tools

SIEM

IDS/IPS

Security monitoring tools

Job description

About the Role

Our client, a leading provider of critical infrastructure services, is seeking an experienced Incident Response Manager to lead their cybersecurity incident response team in Queenstown, Eastern Cape . This senior role is responsible for developing, implementing, and managing the organization's incident response plan, ensuring a swift and effective reaction to all security breaches. You will lead a team of skilled professionals, coordinate response efforts, and communicate with stakeholders at all levels. This is a challenging and impactful position for a seasoned security leader committed to protecting vital assets.

Key Responsibilities

• Develop, maintain, and regularly test the organization's Incident Response (IR) plan.
• Lead and manage the IR team during security incidents, ensuring effective coordination and communication.
• Oversee the detection, analysis, containment, eradication, and recovery phases of security incidents.
• Conduct post-incident reviews to identify lessons learned and implement improvements.
• Develop and maintain relationships with external agencies and partners for incident response support.
• Manage security monitoring tools and ensure the timely reporting of security events.
• Develop and deliver IR training and tabletop exercises to relevant personnel.
• Stay informed about the latest threats, vulnerabilities, and incident response techniques.
• Ensure compliance with relevant legal and regulatory requirements related to incident reporting.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related field; Master's degree preferred.
• Minimum of 7 years of experience in cybersecurity, with at least 3 years in a leadership or management role focused on incident response.
• Proven experience in developing and executing incident response plans in complex environments.
• Deep understanding of incident response methodologies, forensic analysis, and malware analysis.
• Strong knowledge of network security, operating systems, and common attack vectors.
• Excellent leadership, communication, and decision-making skills, especially under pressure.
• Experience with SIEM, IDS/IPS, and other security monitoring tools.
• Relevant certifications such as CISSP, CISM, GCFE, or GCFA are highly desirable.
• Ability to manage multiple concurrent incidents and prioritize effectively.

Benefits

• A competitive annual salary of R.
• Comprehensive medical aid and retirement fund benefits.
• Generous annual leave and sick leave policy.
• Opportunities for advanced training and professional development.
• Relocation assistance may be available.
• A critical role in safeguarding essential services.
• Supportive leadership and team environment.