Cyber Incident Response Lead

Contract Outside IR35 6-Month Initial Contract Immediate Start

A major UK organisation is seeking an experienced Cyber Incident Response Lead to join a critical cyber security function and take ownership of major cyber incidents from day one.

This is an urgent requirement for a hands‑on incident response specialist with a proven track record leading Priority 1 (P1) cyber incidents, driving effective response activities, coordinating technical teams, and providing clear leadership during high‑pressure situations.

Working within a fast‑paced environment, you will play a key role in protecting business operations, managing cyber crises, and ensuring incidents are contained, remediated and communicated effectively.

• Lead the response to major and critical cyber security incidents
• Coordinate technical and business stakeholders during live incident situations
• Drive containment, eradication and recovery activities
• Provide clear direction, leadership and decision‑making during cyber crises
• Deliver timely and effective communications to senior stakeholders and leadership teams
• Conduct incident reviews and identify opportunities for process and control improvements
• Work closely with security operations, infrastructure, technology and business teams to enhance organisational resilience

• Demonstrable experience leading major or P1 cyber security incidents
• Strong background in incident response, cyber crisis management and security operations
• Hands‑on technical capability with the ability to investigate and understand technical detail when required
• Excellent stakeholder management and communication skills
• Ability to operate independently with minimal supervision
• Calm, decisive and outcome‑focused approach under pressure
• Proven experience managing multiple priorities within a fast‑moving environment

• Outside IR35 contract
• Immediate start with onboarding required within the next two weeks
• Pre‑booked interview slots available next week
• Opportunity to make an immediate impact within a critical cyber security function
• Initial 6‑month contract
• Further 6‑month extension highly likely