Major Incident Manager

Ekco; Cape Town; On-site; ZAR 600,000 - 900,000; Full time

Job summary

Ekco is seeking a Major Incident Manager in Cape Town to lead end-to-end incident management for major events across client environments.

You will drive decisions on severity, resources, and communications, chair bridge calls, and own PIRs from detection to closure. Strong ITIL and stakeholder skills are essential for success in this role.

Qualifications

• Proven experience managing major/critical incidents in MSP or multi-client environments.
• Strong ITIL incident, problem, change practices (Foundation minimum).
• Excellent stakeholder management with senior audiences.
• Calm, decisive, structured under time pressure.
• Technical literacy across infrastructure, network, cloud, apps.

Responsibilities

• Own major incident process end-to-end from detection to closure.
• Decide on severity, escalation, and resourcing, including DR/BCP.
• Maintain incident timeline and log for every major incident.
• Chair incident bridge calls with the right technical resources.
• Draft customer and internal communications and PIRs.
• Lead post-incident reviews and drive corrective actions.

Skills

Incident management

Stakeholder management

Change management

Communication to executives

Post-incident reviews

Problem management

ITIL practices

ITSM tooling usage

Education

ITIL Foundation

Tools

Halo

ServiceNow

Job description

Ekco Overview

Founded in 2016, Ekco has quickly become one of Europe’s fastest-growing cloud solution providers and your trusted security-first Managed Service Provider. IT leaders choose Ekco to drive operational efficiency, scale smarter and stay ahead of risk – powered by local expertise, delivered at European scale.

We specialise in helping organisations advance their cloud maturity guiding transformation, strengthening security, and maximising the value of their technology investments.

In simple terms: we help organisations modernise with confidence securing their systems, optimising their cloud, and keeping them resilient in a rapidly changing world.

Today, we’re a thriving team of 1,000+ talented and supportive colleagues across the UK, Ireland, Benelux, South Africa, and Malaysia—and we’re continuing to grow.

Core Values

• On It: We take ownership, follow through, and get things done.
• All In: We collaborate, support each other, and commit fully to shared goals.
• Connected: We build trusted relationships with colleagues, clients, and partners.
• Hungry to Grow: We stay curious, keep learning, and push ourselves to the next level.

If these values resonate with you, you’ll feel right at home here.

The Role

• Own the major incident management process end to end detection, declaration, coordination, resolution, and closure.
• Make timely, informed decisions on incident severity, escalation paths, and resourcing, including invoking disaster recovery or business continuity plans where required.
• Maintain a single, accurate incident timeline and decision log for every major incident.
• Chair major incident bridge calls, ensuring the right technical resources are engaged, distractions are minimised, and progress is driven with urgency.

Day-to-day at Ekco

• Provide clear, jargon-free, confidence-inspiring updates to customers and internal stakeholders at agreed intervals throughout an incident.
• Manage communications with senior/executive stakeholders (both customer side and internal) during high-severity or reputationally sensitive incidents.
• Coordinate with Account/Service Delivery Managers to ensure customer specific contractual obligations (SLAs, notification windows, reporting requirements) are met.
• Own the drafting and distribution of incident communications, bridge invites, and status updates.
• Lead post-incident reviews (PIRs) for all major incidents, ensuring root cause, contributing factors, and timeline are accurately captured.
• Track root cause analysis and corrective/preventive actions through to completion, holding action owners to account.
• Produce major incident reports for customers and internal governance forums, identifying trends and systemic risks.
• Feed lessons learned into problem management, service improvement plans, and process/documentation updates.

Process, Governance & Reporting

• Own and continually improve the major incident management process and supporting documentation, aligned to ITIL best practice.
• Maintain and test major incident and communication plans, including periodic simulation/rehearsal exercises.
• Produce regular MI performance reporting (volumes, MTTR, SLA impact, recurring themes) for leadership and customer governance meetings.
• Ensure accurate incident records are maintained in the ITSM toolset (e.g. ServiceNow, Halo, Autotask) for audit, billing, and reporting purposes.
• Support internal and external audits (e.g. ISO 20000, ISO 27001, Cyber Essentials) with evidence of incident management practice.
• Act as a point of escalation and mentor for the wider service desk and technical teams during incidents, promoting a culture of ownership and urgency.
• Build strong working relationships across Service Desk, Technical Operations, Security, Problem Management, and Account Management functions.
• Represent Major Incident Management in customer-facing governance meetings (Service Reviews, CAB) as required.
• Participate in, and potentially manage, an out-of-hours on-call rota for major incident coverage outside business hours.

Qualifications and Experience

• Proven experience managing major/critical incidents within an MSP, IT service provider, or complex multi-client technical environment.
• Strong working knowledge of ITIL incident, problem, and change management practices (ITIL Foundation certified as a minimum).
• Excellent stakeholder management skills, with demonstrable experience communicating confidently and clearly to senior/executive audiences under pressure.
• Ability to remain calm, decisive, and structured in high-pressure, ambiguous, and time-critical situations.
• Strong technical literacy across common infrastructure, network, cloud, and application technologies, sufficient to challenge technical teams and understand impact/root cause.
• Experience using ITSM tooling (Halo) for incident and reporting purposes.
• Excellent written communication skills, with the ability to produce clear customer-facing incident reports under time pressure.
• Experience running or contributing to post-incident reviews and driving corrective actions to completion.

Why Ekco

A culture rooted in diversity, equality, inclusion & belonging

• Company of the year 2026 Tech Excellence Awards
• Microsoft’s 2023 Rising Star Security Partner of the Year
• First Irish Microsoft MSP to achieve all four Microsoft Security Specializations
• A commitment to internal mobility and career progression
• Flexible, family-friendly working at the heart of our culture
• Proud to be your trusted security-first Managed Service Provider chosen by IT leaders to drive operational efficiency, scale smarter and stay ahead of risk.

Major Incident Manager Cape Town, Western Cape, South Africa