> Markdown version of [/jobs/ext/2009728-security-incident-management-analyst-active-sc-or-sc-eligible](https://www.wearedevelopers.com/jobs/ext/2009728-security-incident-management-analyst-active-sc-or-sc-eligible). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Incident Management Analyst - Active SC or SC Eligible - **Company:** ETeam Inc - **Location:** Inverness, UK - **Salary:** £125,580.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Issue Tracking Systems - **Published:** August 10, 2026 - **Apply:** https://www.careerboard.com/pt/en/find-jobs-in-United-Kingdom/-6D524EBBB13ECE1E4D/ ## About the Role * Experience in cyber security, service management, operational governance, or support roles * Understanding of security incident management processes * Awareness of: + Incident severity classifications * Escalation processes * Major incident management principles * Strong organisational and reporting skills * Ability to coordinate multiple stakeholders Desirable * Exposure to SIAM or multi-supplier environments * Familiarity with incident management tooling and reporting outputs * Understanding of ITIL Incident Management concepts * Experience in regulated, government, or defence environments Key Deliverables * Incident reporting packs * Supplier incident performance metrics * Incident status tracking and governance records * Audit-ready incident evidence * Inputs to governance and operational review forums ## Description The Security Incident Management Analyst operates within the Operational Integrator (OI) function in a multi-supplier (SIAM) environment, supporting the governance and coordination of security incident management activities across suppliers. The role assists in ensuring security incidents are identified, tracked, escalated, and reported in accordance with client policies and agreed service levels. Working closely with suppliers, service management teams, and security stakeholders, the consultant supports incident visibility, reporting, governance activities, and audit readiness. This is a governance and coordination role and does not perform Security Operations Centre (SOC) monitoring, threat hunting, incident response, or technical remediation activities. Key Responsibilities: Incident Tracking & Coordination- * Support the monitoring of security incidents throughout their life cycle * Ensure incident records are maintained and updated by suppliers * Track incident progress from identification through to closure * Escalate overdue, recurring, or high-impact incidents through agreed governance channels Supplier Engagement (SIAM Model) * Coordinate with suppliers to obtain incident updates and status reports * Support the collection and validation of supplier incident reporting * Ensure incident data standards and reporting requirements are applied consistently * Identify gaps in ownership, reporting, or evidence Incident Reporting & Visibility * Produce routine security incident reports and dashboards * Assist in monitoring: + Incident volumes * Resolution performance * SLA compliance * Escalation trends * Support governance forums through accurate reporting and status updates Governance & Process Compliance * Support adherence to agreed incident management processes * Ensure supplier activities align with client security policies and standards * Assist with documenting lessons learned and improvement actions * Support maintenance of incident governance documentation Assurance & Evidence Support * Collect and organise incident management evidence * Support assurance and audit activities * Ensure incident records remain complete, traceable, and audit-ready * Assist in demonstrating process compliance and effectiveness, The role supports the governance and visibility of security incident management activities across suppliers, ensuring incidents are consistently tracked, reported, and evidenced without performing operational incident response activities. What This Role Does/Does Not Do Does * Track and coordinate incidents * Support governance and reporting activities * Validate supplier information * Maintain incident visibility and status reporting Does Not * Operate SOC tooling * Perform threat hunting * Conduct incident response * Own technical remediation activities You can bring your whole self to work. At Client's building an inclusive future is part of everyday life and will be part of your working reality. We have built a representative and welcoming environment, for everyone. ## Related Videos - [Recruiting in 2025: Will AI Help or Take Over?](https://www.wearedevelopers.com/videos/1301-recruiting-in-2025-will-ai-help-or-take-over) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)