Cyber Security Incident Manager*
Recruitment Agency: Experis
Location: Fully remote
Temporary: 3 month rolling ( likely 1 year)
Salary: Not listed
-
Job Title - Cyber security incident manager
SC cleared or eligible for clearance.
3 month rolling ( likely 1 year)
Fully remote
Key Responsibilities
Incident Response & ManagementLead and coordinate major cyber security incidents (e.g., ransomware, data breaches, phishing campaigns, insider threats).
Serve as primary incident commander during high?severity events.
Oversee triage, impact assessment, containment strategies, and remediation plans.
Ensure timely escalation and communication to leadership and relevant stakeholders.
Maintain accurate incident logs, timelines, and evidence for audits or legal processes.
Threat Analysis & Investigation
Direct technical investigations, working with SOC analysts, threat intelligence teams, and external partners.
Analyse attack vectors, exploits, and root causes.
Guide forensic activity where required, ensuring evidence integrity.
Governance, Reporting & Continuous Improvement
Produce detailed incident reports, executive summaries, and post?incident reviews.
Track incident metrics, trends, and lessons learned to improve security posture.
Drive improvements in incident response playbooks, processes, and tooling.
Ensure incidents are handled in alignment with frameworks such as NIST
Stakeholder & Vendor Coordination
Act as the key liaison during incidents with IT, Risk, Legal, Compliance, HR, Communications, and third?party partners.
Support customer?facing communication where relevant (for MSSP or managed services environments).
Manage relationships with external responders, MSSPs, and law enforcement as applicable.
Operational Readiness
Support the development and delivery of cyber incident simulations, tabletop exercises, and readiness assessments.
Ensure IR documentation is current, accessible, and aligned with business needs.
Provide mentoring and support to junior analysts and incident responders.
Essential Skills & ExperienceProven experience leading complex cyber security incidents in a mid?to?large enterprise or MSSP environment.
Strong understanding of attack methodologies, malware behaviour, and adversary TTPs.
Experience with SIEM, EDR, SOAR, threat intel platforms, and forensic tools.
Deep knowledge of IR frameworks:
Ability to make clear decisions under pressure and command multi?disciplinary response teams.
Excellent communication skills, with the ability to convey technical detail to senior leadership.
The Work From Home Hub is dedicated to finding and sharing remote and hybrid job opportunities across the UK. The content available on theworkfromhomehub.co.uk is intended for general informational purposes only. While we strive to ensure the information provided is accurate and reliable, we make no guarantees or warranties, expressed or implied, regarding the accuracy, adequacy, validity, reliability, availability, or completeness of the information presented on our site.
Feeling stuck in your job search?
Shift self-doubt into career confidence with solution focused support.
Book a free breakthrough session and receive a relaxation audio plus a Work from Home Hub discount.
Take your next step with clarity and courage.
This page may contain adverts for products and services tailored to those seeking homebased roles or already working remotely. These adverts help The Work From Home Hub source and share more job opportunities to our community. Support our mission - become a partner today.