Senior Incident Manager

Senior Incident Manager Overview

As Senior Incident Manager, you will lead and manage the Incident Management function, ensuring strategic alignment and operational excellence. While this is a team leadership role, you will remain actively involved in managing major incidents and guiding security operations through complex challenges. Reporting to the Head of Incident Investigation & Response, you will act as the primary contact for incident within the cyber defence.

You will drive continuous improvement, develop team capability, and keep stakeholders and senior leadership fully informed throughout the incident lifecycle. This role offers significant visibility across cyber security and technology and the opportunity to shape how we respond to the most critical cyber threats.

• Act as the primary contact for Incident Management and CSIRT within Cyber Defence.
• Define and implement the Cyber defence Incident Management strategy, ensuring alignment with security strategy and business priorities.
• Provide leadership and oversight for high-impact incident escalations, ensuring timely resolution and minimal business disruption.
• Lead and develop the Incident Management team, including hiring, coaching, and succession planning.
• Manage relationships with external IR providers to ensure readiness and effective collaboration during major incidents.
• Own incident reporting and continuous improvement objectives.
• Conduct regular tabletop exercises to validate plans against priority threats and regulatory expectations.
• Communicate effectively with diverse audiences—technical teams, senior leaders, and external partners.
• Influence broader Cyber Defence strategy, including automation, AI-driven response, and tooling enhancements.

• Extensive experience in leading and managing incident response within large, complex organisations.
• Strong leadership and people management skills, with a proven track record of developing high-performing teams.
• Ability to influence senior stakeholders and lead cross-functional teams under pressure.
• Deep understanding of incident response frameworks, processes, and technologies.
• Exceptional communication skills, capable of translating technical detail for executive audiences.
• Strategic and operational mindset with experience in capability development and process optimisation.
• Familiarity with enterprise security technologies, security controls, and threats.

We are proud to have an inclusive culture where everyone truly feels able to be themselves. We celebrate diversity and value differences, ensuring all colleagues have equal opportunities. We are committed to providing an inclusive and accessible recruitment process. We are accredited Disability Confident Leader.

We offer a range of full-time and part-time working patterns across our many business areas. Our offices will continue to be where we connect, collaborate and innovate. We combine office and remote working in a blended pattern. If you are applying internally, please speak to the hiring manager about how this can work for you.