Cyber Incident Manager

Role:
Cyber Incident Manager

Duration: 5 Months

Location:

UK Remote

Day Rate: £500 Inside IR35

Active SC clearance required due to project restrictions

We are seeking an experienced Cyber Incident Manager to join a high-profile programme supporting a secure government environment. The successful candidate will lead the coordination, management, and resolution of cyber security incidents, ensuring rapid response, stakeholder engagement, and continuous service improvement.

This role requires a proactive individual with strong communication skills, experience managing complex cyber incidents, and the ability to operate effectively within secure and highly regulated environments.

• Lead the end-to-end management of cyber security incidents and major security events.
• Coordinate technical response teams during security incidents, ensuring timely containment, eradication, and recovery activities.
• Act as the primary point of contact for cyber incident communications and stakeholder updates.
• Facilitate incident response bridges and war-room activities during critical incidents.
• Ensure incidents are appropriately prioritised, investigated, documented, and escalated.
• Produce post-incident reports, lessons learned documentation, and root-cause analysis findings.
• Work closely with Security Operations Centres (SOC), security analysts, infrastructure teams, and third-party suppliers.
• Monitor incident trends and provide recommendations for improving cyber resilience.
• Support the development and enhancement of incident response processes, playbooks, and procedures.
• Ensure compliance with organisational security policies and industry best practices.

• Active SC Clearance.
• Minimum 5 years' experience within Cyber Security, Incident Management, or Security Operations environments.
• Proven experience leading and managing cyber security incidents from initiation through to resolution.
• Strong knowledge of incident response methodologies and cyber security frameworks.
• Experience working with SIEM, EDR, and threat intelligence platforms.
• Excellent stakeholder management and communication skills.
• Ability to coordinate multiple technical teams during high-pressure incidents.
• Strong analytical and problem‑solving skills.
• Experience producing executive-level incident reports and recommendations.

• Certifications such as CISSP, CISM, GCIH, CompTIA Security+, or equivalent.
• Experience with in Government, Defence, National Security, or Critical National Infrastructure sectors.
• Knowledge of NIST, ISO 27001, Cyber Essentials, and NCSC guidance.
• Experience working within Security Operations Centres (SOC).