Major Incident Manager

Fnb South Africa; Gauteng; Hybrid; ZAR 450,000 - 750,000; Full time

Benefits offered by this job

Health insurance

Retirement plan

Paid time off

Job summary

Fnb South Africa is seeking a seasoned Incident Response Manager based in Sandton, Gauteng, ZA. The role leads incident response efforts, coordinates a team of responders, and protects business operations. Hybrid work arrangement with on-site collaboration when needed.

The candidate should have extensive incident response, digital forensics, and crisis management experience, with strong leadership and communication skills. Relevant GIAC/CISSP/CISM certifications are advantageous.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field; Master's preferred.
• Minimum of 7 years of cybersecurity experience, with at least 3 years in incident response/management.
• Proven experience leading incident response for complex breaches.
• In-depth knowledge of incident response, digital forensics, and malware analysis.

Responsibilities

• Develop, maintain, and execute the incident response plan.
• Lead and manage the incident response team with guidance and mentorship.
• Oversee detection, containment, eradication, and recovery phases of security incidents.
• Coordinate incident response across departments and external parties.
• Conduct post-incident analysis to identify root causes and prevent recurrence.
• Manage digital forensics investigations.
• Stay current with threats and incident response best practices.
• Develop and deliver incident response training and tabletop exercises.
• Manage relationships with external security vendors and law enforcement.
• Report trends, response effectiveness, and security posture to leadership.

Skills

Incident Response

Leadership

Crisis Management

Communication

Team Coordination

Education

Bachelor's in CS/Cybersecurity

Master's preferred

Tools

SIEM

EDR

Forensic tools

Job description

Job Description

Our client is seeking a seasoned Incident Response Manager to lead their cybersecurity incident management efforts. Based in Sandton, Gauteng, ZA, this role is critical for developing, implementing, and executing plans to detect, respond to, and recover from cybersecurity incidents. You will lead a team of highly skilled responders, coordinate efforts during crises, and ensure minimal disruption to business operations. The ideal candidate has extensive experience in incident response, digital forensics, and crisis management, with strong leadership and communication skills. This position involves a hybrid work arrangement, requiring flexibility to work both remotely and from our Sandton, Gauteng, ZA office as needed for critical operations and team collaboration. You will play a vital role in protecting our client from the impact of cyber threats.

Key Responsibilities

• Develop, maintain, and execute the organization's incident response plan.
• Lead and manage the incident response team, providing guidance and mentorship.
• Oversee the detection, containment, eradication, and recovery phases of security incidents.
• Coordinate incident response activities across various departments and external parties.
• Conduct post‑incident analysis to identify root causes and implement preventative measures.
• Manage digital forensics investigations.
• Stay current with emerging threats, attack vectors, and incident response best practices.
• Develop and deliver incident response training and tabletop exercises.
• Manage relationships with external security vendors and law enforcement agencies.
• Report on incident trends, response effectiveness, and security posture to leadership.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related field; Master's degree preferred.
• Minimum of 7 years of experience in cybersecurity, with at least 3 years in an incident response or management role.
• Proven experience in leading incident response efforts for complex security breaches.
• In-depth knowledge of incident response methodologies, digital forensics, and malware analysis.
• Strong understanding of network protocols, operating systems, and security technologies.
• Excellent leadership, communication, and crisis management skills.
• Experience with SIEM, EDR, and forensic tools.
• Ability to work under pressure and make critical decisions quickly.
• Experience working in a hybrid environment.
• Relevant certifications such as GIAC (GCIH, GCFA), CISSP, or CISM are highly desirable.

Benefits

• Competitive compensation package, including an attractive base salary and performance‑based incentives.
• Comprehensive health, dental, and vision insurance.
• Retirement savings plan.
• Generous paid time off.
• Opportunities for advanced training, certifications, and conference attendance.

Johannesburg R450000 - R750000 per year