Incident response manager

Job Description

Our client is a forward-thinking organisation seeking a highly skilled Incident Response Manager to strengthen their security posture. This is a hybrid role based in the Midlands, offering the chance to lead cyber incident response and contribute to wider security operations.

The Role:

You will be responsible for managing cybersecurity incidents end-to-end, ensuring rapid detection, containment, and recovery. Beyond incident management, you will play a key role in security operations, supporting continuous improvement across monitoring, threat intelligence, and operational resilience.

Key Responsibilities:

• Lead and coordinate response to cyber incidents, including investigation, containment, remediation, and post-incident reporting.
• Develop, maintain, and test incident response plans and playbooks.
• Collaborate with SOC and security teams to enhance monitoring, detection, and operational capabilities.
• Conduct post-incident reviews and implement lessons learned.
• Provide guidance and mentorship to junior security operations staff.
• Ensure compliance with internal policies and regulatory requirements.

Candidate Requirements:

• Proven experience in incident response within a cyber security context.
• Solid background in security operations (SOC, threat monitoring, vulnerability management).
• Experience with incident detection and response tools (SIEM, EDR, SOAR).
• Knowledge of security frameworks (NIST, ISO 27001, CIS).
• Strong analytical, problem-solving, and communication skills.
• Ability to work in a hybrid environment with occasional office attendance.
• Relevant certifications (CISSP, CISM, GCIH, GCIA, GCFA) advantageous.