Senior Manager – Cyber Incident & Response – Consulting

Overview

In this senior role, you will lead and shape a Cyber Incident Response (CIR) practice across advisory and live incident management, partnering with senior stakeholders to boost client resilience. You’ll orchestrate preparedness planning, incident playbooks, and simulations while guiding live responses with technical experts. The position blends leadership, client development, and delivery across complex engagements, helping grow the CIR offering and reputation. You will drive impact through strategic advisory, crisis management, and cross-functional collaboration.

Responsibilities

• Lead complex CIR advisory and incident management engagements
• Advise on incident preparedness, crisis management and operational resilience
• Develop incident response plans, playbooks, readiness assessments and post-breach reviews
• Design and facilitate simulations, wargames, and exercises for executives
• Support live incident responses with technical specialists
• Build trusted relationships with senior client stakeholders
• Lead business development, go-to-market, proposals and pitches
• Identify opportunities to expand client relationships across proactive and reactive services
• Lead multidisciplinary teams and manage project, programme, financial and people aspects
• Contribute to new CIR propositions and service enhancements
• Coach and develop colleagues and build cyber practice capability
• Enhance external profile and market reputation of the CIR practice

Key requirements

• Significant experience in Cyber Incident Response, incident management or related operational cyber role
• Strong understanding of CIR methodologies, attacker techniques, threat themes and key security concepts
• Experience developing incident response plans and playbooks
• Experience designing and facilitating cyber exercises and training for varied seniority
• Proven track record leading large, complex client engagements with financial and people management
• Experience in private-sector business development, propositions, pitches and client relationships
• Commercial awareness of how cyber incidents affect business processes and resilience
• Experience influencing senior executives and C-suite stakeholders
• Excellent written and verbal communication translating complex cyber issues
• Strong leadership, problem-solving and stakeholder-management capabilities
• Familiarity with ISO 27001 and NIST frameworks advantageous
• Relevant professional qualifications such as CISSP, ITIL, CompTIA Security+, SANS or equivalent beneficial
• Existing Government Security Clearance advantageous, willingness to undergo vetting
• Willingness to travel across UK and EMEA for live incidents

• leadership
• stakeholder-management
• communication
• CIR methodologies
• incident response planning
• playbooks

…