Incident response manager

Key Responsibilities

1. Lead and coordinate the organisations response to security incidents from detection through containment, eradication, recovery, and closure
2. Act as the incident commander during security incidents, leading incident bridge calls, war rooms, and stakeholder updates
3. Coordinate and oversee forensic investigations, including evidence preservation, scoping, and investigative workflows
4. Ensure proper forensic handling, chain of custody, and documentation during incidents
5. Work with internal teams, the outsourced SOC, and external forensic providers to support root cause analysis and impact assessment
6. Maintain close alignment with the SOC provider to ensure timely alert escalation, investigation, and response actions
7. Review forensic findings, timelines, and reports to validate accuracy and completeness
8. Coordinate with infrastructure, cloud, application, IT, and security teams to support investigation and remediation activities
9. Track incident actions, decisions, owners, and timelines to ensure accountability and timely closure
10.