Incident Response Manager

Placements24; Benoni; Hybrid; ZAR 900,000 - 1,300,000; Full time

Benefits offered by this job

Remote work

Health benefits

Career development

Job summary

Placements24 is seeking an experienced Incident Response Manager to lead the organisation's cybersecurity incident response function in a fully remote role. You will develop, manage, and execute the incident response plan, coordinating containment, eradication, and recovery while minimizing impact.

The ideal candidate has 7+ years in cybersecurity with incident response and digital forensics, along with strong leadership and decision-making under pressure. Certifications are highly desirable.

Qualifications

• 7+ years in cybersecurity with a focus on incident response and digital forensics.
• Proven experience managing complex security incidents in large enterprises.
• Bachelor's degree in Cybersecurity or Computer Science; relevant certifications desirable.

Responsibilities

• Develop, maintain, and improve the incident response plan and playbooks.
• Lead incident response activities during security breaches and cyberattacks.
• Oversee forensic investigations to determine scope, cause, and impact.
• Manage communications with legal, PR, and regulatory bodies.
• Conduct post-incident reviews and implement corrective actions.
• Mentor and train the incident response team.

Skills

Incident response

Digital forensics

Security leadership

Crisis communication

Decision making

SIEM

EDR

Threat intel

Education

Bachelor's degree in Cybersecurity or CS

Tools

SIEM

EDR

Forensic tools

Malware analysis sandbox

Job description

About the Role

Our client is seeking an experienced and decisive Incident Response Manager to lead their cybersecurity incident response function. This is a critical remote role responsible for developing, managing, and executing the organisation's incident response plan. You will lead the response to security breaches and cyberattacks, coordinating efforts to contain, eradicate, and recover from incidents, while minimizing impact and preventing recurrence. The ideal candidate has a proven track record in incident management and a deep understanding of forensic investigations and security remediation strategies, vital for protecting the organisation in a remote setting.

Key Responsibilities

• Develop, maintain, and continuously improve the organisation's incident response plan and playbooks.
• Lead and coordinate incident response activities during security breaches and cyberattacks.
• Oversee forensic investigations to determine the scope, cause, and impact of security incidents.
• Manage communication with internal and external stakeholders during incidents, including legal, PR, and regulatory bodies.
• Conduct post-incident reviews to identify lessons learned and implement corrective actions.
• Manage the incident response team, providing guidance, mentorship, and training.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, or a related field; relevant certifications (e.g., GCIH, GCFA, CISSP) are highly desirable.
• 7+ years of experience in cybersecurity, with a strong focus on incident response and digital forensics.
• Proven experience managing complex security incidents in a large enterprise environment.
• In-depth knowledge of incident response methodologies, forensic analysis techniques, and threat actor TTPs.
• Experience with security tools such as SIEM, EDR, network forensics tools, and malware analysis sandboxes.
• Excellent leadership, communication, and decision-making skills under pressure.

Benefits

• Highly competitive salary and remote work flexibility.
• Comprehensive health and wellness benefits.
• Opportunities for advanced training and professional development.
• Direct impact on the organisation's resilience against cyber threats.
• A collaborative and supportive team environment, fully embracing remote operations.