Overview
In this senior role you lead cyber incident response advisory and live incident management engagements for major organisations, shaping resilience and incident readiness. You work with C-suite and senior stakeholders to implement response strategies, playbooks, and simulations, while driving growth of the Cyber Incident Response offering. The role blends consultancy leadership with hands-on incident management during high-impact events, including business development and client relationship building. You will mentor teams and expand capability across the practice, contributing to the firm’s market profile.
Responsibilities
- Lead complex Cyber Incident Response advisory and incident management engagements
- Advise on incident preparedness, crisis management and operational resilience
- Develop incident response plans, playbooks, readiness assessments and post-breach reviews
- Design and facilitate cyber simulations, wargames and exercises for senior stakeholders
- Contribute to live incident responses alongside technical specialists
- Act as trusted adviser to senior client stakeholders and build lasting relationships
- Lead business development activity, including go-to-market initiatives and pitches
- Identify opportunities to expand client relationships across proactive and reactive cyber services
- Lead multidisciplinary teams and manage project, programme, financial and people aspects
- Contribute to development of new CIR propositions and enhancement of services
- Coach, mentor and develop colleagues and build wider capability
- Contribute to external profile and market reputation of the practice
Key requirements
- Significant experience in Cyber Incident Response, incident management or related operational cyber role
- Strong understanding of CIR methodologies, attacker techniques and key security concepts
- Proven ability to develop incident response plans, procedures and scenario-specific playbooks
- Experience designing and facilitating cyber incident exercises for varied seniority
- Track record of leading large, complex client engagements with project, financial and people management
- Strong experience in business development, propositions, pitches and senior client relationships
- Commercial awareness of how cyber incidents affect business processes and resilience
- Experience influencing senior executives and C-suite stakeholders
- Excellent written and verbal communication translating complex cyber issues to diverse audiences
- Strong leadership, problem-solving and stakeholder-management skills
- Familiarity with ISO 27001 and NIST is advantageous
- Professional qualifications such as CISSP, ITIL, CompTIA Security+, SANS or equivalent beneficial
- Government Security Clearance advantageous; willing to undergo vetting
- Willingness to participate in on-call rota and travel within UK and EMEA
- Executive stakeholder management
- Strategic thinking
- Communication excellence
- Incident response methodologies
- Playbook design
- Wargaming and simulations
…
