Security Incident Management Lead

Computacenter PLC
Hatfield, UK
about 1 month ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
5 years minimum
Working hours
Regular working hours
Job source

Tech stack

Cascading Style Sheets (CSS) Cyber Security Decision Support Systems

Job description

As the Security Incident Management (SIM) Lead, you will shape and define how Computacenter responds to and prepares for cyber incidents. This role is responsible for building, maintaining and evolving the end-to-end security incident management framework, alongside owning a structured security incident exercise programme that ensures the organisation is ready to respond when it matters. You will own how Security Incident Management operates across Cyber Security, ensuring the framework is clear, effective and continuously improved, from triage through to response and testing. This includes designing and running realistic incident exercises that challenge both our processes and our people, ensuring gaps are identified and embedded back into the framework to improve readiness over time. Working across Cyber operational teams and wider in a matrix environment, you will bring consistency to both how incidents are handled and how preparedness is measured, ensuring that processes, playbooks and expectations are understood, tested and embedded. You will also own key deliverables including the Monthly SIM Review, contributions to the annual security risk review, and routine reporting. When required, you will step in to manage incidents, working alongside the SIM team to provide additional surge capacity and support the end-to-end management of incidents. What you’ll do

  • Own and evolve the end-to-end Security Incident Management process, ensuring it is clear, effective, and embedded across teams
  • Develop, maintain, and improve incident playbooks, workflows, and procedures, keeping them aligned to threat, risk, and operational needs
  • Design and run the annual security incident exercise schedule, covering low level tabletop exercises through to complex, cross-team simulations
  • Lead the planning and execution of exercises, ensuring clear objectives, measurable outcomes, and actionable improvements
  • Use lessons learned from incidents and exercises to drive continuous improvement in response capability and resilience
  • Act as the senior escalation point for priority incidents, providing leadership, coordination, and decision support when required
  • Support incident triage and routing across SIM, Major Incident Management (MIM), and Cyber Support Services (CSS)
  • Own the Monthly SIM review and reporting, providing clear insight, trends, and recommendations to stakeholders

Requirements

  • Proven experience building, leading and maturing cyber security incident management capability within a complex, global organisation
  • More than 5 years’ operating at a senior level in security / incident management, with credibility gained in large, complex, global organisations
  • Strong track record of defining and improving end-to-end security incident management frameworks, not just operating within them
  • Extensive experience designing and delivering security incident response exercises, from large-scale, multi-team simulations to smaller cross team tabletop exercise.
  • Demonstrable experience embedding playbooks, processes and governance across operational teams, driving consistency and maturity
  • Ability to translate lessons learned, threat intelligence and industry best practice into tangible improvements in capability and resilience
  • Comfortable providing decisive leadership during live cyber incidents when required, while maintaining a focus on improving the overall operating model
  • Strong stakeholder management, able to work across technical and non-technical teams and bring alignment in a matrix environment
  • Experience driving continuous improvement at pace, identifying gaps, challenging existing approaches and delivering measurable outcomes

About the company

Computacenter is a leading independent provider of IT infrastructure services, with about 21,000 employees worldwide. We work at the heart of digitisation, advising organisations on IT strategy, implementing the most appropriate technology and managing our customers’ infrastructures. We offer a friendly, open working environment without too much fuss about hierarchy. We are looking for professionals with diverse competencies, personalities and strengths who want to live our shared value of teamwork and performance. Interested in joining a company with a strong sense of community? We’re growing. We’re hiring. We encourage. We empower. We support. #winningtogether #peoplematter

You must create an Indeed account before continuing to the company website to apply

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on uk.indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:00 min

Encapsulating CSS styles and variables within Lit components

Lucien Immink · WWC 2023

3:24 min

Introducing human-in-the-loop decision support for logistics planning

Stefan Petrov · LIVE

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · WWC 2022

10:35 min

Teaching and coaching security concepts for lasting impact

Tanya Janca · WWC 2021

5:56 min

Managing CSS specificity and the rise of utility frameworks

Chris Heilmann +2 · LIVE

2:59 min

Building operational accountability by transferring fragility within teams

Jan de Vries Jan de Vries · WWC Europe 2026

Videos

See all

Related articles

See all