Cyber Incident Operations Lead
We are seeking a Cyber Incident Operations Lead to oversee the detection, response and resolution of cyber security incidents across a complex technology environment. This role will provide operational leadership during high-impact events, coordinate technical and business stakeholders, and ensure incidents are managed efficiently from initial triage through to recovery and closure. You will act as a senior point of escalation, helping to protect critical services, sensitive information and organisational resilience.
Key responsibilities include leading the incident response process, assessing severity and business impact, assigning appropriate response teams, and maintaining clear communication with technical specialists, senior leaders and relevant third parties. You will coordinate investigations into security alerts, suspected breaches, malware, unauthorised access, data loss and other cyber events. The role will also oversee the development and testing of incident response playbooks, improve escalation procedures, track incident metrics, and ensure accurate, timely documentation. Following major incidents, you will lead post-incident reviews, identify root causes, and drive corrective actions to reduce the likelihood and impact of future events.
The successful candidate will have substantial experience in cyber security operations, incident response or a closely related discipline, including hands-on experience managing complex or high-severity incidents. You will be confident working with security monitoring, endpoint detection, identity, network and vulnerability management technologies, and have a strong understanding of threat intelligence and attack techniques. Experience with recognised security frameworks and standards, such as NIST or ISO 27001, is desirable. Strong analytical, communication and decision-making skills are essential, along with the ability to remain calm under pressure, manage competing priorities and influence stakeholders at all levels. Relevant professional certifications in cyber security, incident handling or service management would be advantageous.
Cyber Incident Operations Lead
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Architect
- Security Consultant
- IT Security Manager
- SOC Analyst
- Identity Access Management IAM
- Cyber Security Consultant
- Cloud Security
- Application Security
- Incident Response
- Penetration Tester
LATEST JOBS
- Cyber SOC Specialist - ESN
- End User Platform Vulnerabilit...
- Lead Security Engineer
- Member of Technical Staff (Sof...
- Cyber Security Consultant - As...
- Cyber Security Analyst - Enter...
- Technical Leader - Splunk Secu...
- Digital & Cyber Resilience – M...
- Data Protection Engineer
- Security Advisor
- Information Security Engineer
- Test Automation Engineer - Sec...
TOP SEARCHES
LOCATIONS
- Engineer
- Data Scientist
- Senior Data Scientist
- Head of Data Science
- Trainee Data Scientist
- Data Science Graduate
- Senior Financial Accountant
- Management Accountant
- Cost Accountant
- Civil Engineer
- Senior Civil Engineer
- Civil Design Engineer