Incident and Preparedness Specialist

Job Title:

Incident and Preparedness Specialist

Req

Job Function:
Cyber Security

Posting

Start Date:

10/09/2026

Posting End Date: 24/09/2026

Division:
Networks

Job Location:

G  Bristol - Assembly, G
-Manchester-New Bailey

Advertised Salary:
Competitive with Great Benefits

Job Req

Posting Date: 10th Sep 2026

Closing Date: 24th Sep 2026

Location:

Bristol or Manchester

Our brand, reputation, ability to serve our customers and grow our business is founded on a strong security posture and ability to defend against harm and minimise risk. This role part of a team responsible for the delivery and coordination of BT Group’s Cyber Operations activities relating to Priority 3 through Priority 1 cyber security incidents, ensuring effective response, containment, recovery and restoration of services to minimise business impact.

The position is also responsible for supporting the maintenance and enhancing BT’s readiness to respond to major cyber incident through the delivery of cyber preparedness activities, exercises, training programmes and cross-functional engagement. It is responsible for the governance and execution of Security bronze-level incident management processes, supporting the wider Business Continuity Management framework and coordinating cyber preparedness assessments across the organisation.

The role also develops, maintains and reports on cyber preparedness metrics and KPIs, driving continuous improvement in cyber resilience, operational readiness and incident response capabilities to ensure BT remains prepared to address an evolving threat landscape.

The role is hybrid (3 days in office) & can be based in either Bristol or Manchester.

SC Clearance eligibility is required.

• Responsible for coordinating and delivering Priority 3 through Priority 1 cyber incident response activities, ensuring effective containment, remediation, recovery and communication throughout the incident lifecycle.
• Responsible for maintaining BT's readiness to respond to major cyber incidents through the delivery of cyber preparedness activities, supporting operational resilience and response effectiveness.
• Responsible for the execution and continual improvement of Security Bronze-level incident management processes, supporting the wider BT Business Continuity Management framework.
• Responsible for coordinating and delivering the BT Cyber Exercising Programme, including federated exercising activities across business units and key stakeholders.
• Responsible for delivering cross-business cyber incident preparedness training, awareness and engagement activities to strengthen organisational readiness.
• Responsible for the creation, maintenance, analysis and reporting of cyber preparedness metrics, KPIs and management information to support informed decision-making and continuous improvement.
• Responsible for conducting cyber preparedness assessments and developing recommendations that strengthen cyber resilience across BT.
• Builds and maintains effective relationships across BT Group to support the consistent delivery of security operations services and identify opportunities to improve cyber resilience and operational effectiveness.
• Provides guidance, support and knowledge sharing to colleagues, contributing to the development of team capability and operational performance.
• Drives continuous improvement initiatives across cyber incident management and preparedness processes to enhance efficiency, effectiveness and resilience.
• Works closely with Cyber Operations, Security and business stakeholders to support the development and enhancement of incident management capabilities, processes and technologies.
• Represents BT Group in internal and external forums, exercises and collaboration activities, sharing best…