Cyber Security Incident Response Lead

An exciting opportunity has arisen for a Cyber Security Incident Response Manager to join a leading Financial Services organisation based in Glasgow. This role plays a key part in safeguarding the organisation from cyber threats by identifying, responding to, and mitigating cybersecurity incidents.

As part of the Cyber Detect and Respond Operations Team, you will be instrumental in enhancing security operations, strengthening defences, and ensuring operational resilience., * Lead real-time response to cyber threats, managing cybersecurity incidents and investigations through to resolution.

• Analyse security breaches, identify attack vectors, and ensure appropriate remediation actions are taken.
• Assess, mitigate, and neutralise security incidents, ensuring adherence to industry best practices.
• Collaborate with cross-functional teams to improve cybersecurity measures and prevent future threats.
• Provide clear communication to senior management on cybersecurity risks and incidents.
• Drive continuous improvement through post-incident reviews and scenario testing.

• Extensive experience in cybersecurity incident response and operational leadership within a Security Operations environment.
• Strong knowledge of cyber attack vectors, threat actors, and risk mitigation strategies.
• Proficiency in cybersecurity metrics, risk management, and incident response best practices.
• Excellent communication and stakeholder management skills.
• Ability to work in a dynamic, fast-paced environment with a proactive approach to security threats.
• Willingness to participate in an on-call rotation for incident response.

Desirable Skills & Qualifications

• Professional certifications such as CISSP, CISM, CEH, GIAC.
• Familiarity with ITIL Service Management processes (Change, Incident & Problem Management).
• Experience in eDiscovery and digital forensics.
• Knowledge of operational security controls and product stacks.

• Competitive salary and excellent benefits from day one including discretionary bonus, strong pension scheme (minimum 10%), 38 and a half days AL and Private medical.
• Remote working with a requirement to be in 1 day a month but with the willingness to come into Newcastle or Glasgow if a security incident occurs.
• Be part of a growing cybersecurity function within a well-established Financial Services organisation.
• Work on high-impact projects that shape the security strategy of the business.