Incident Response Manager

We're hiring an Incident Response Manager to coordinate and manage our customers response to security incidents, ensuring they are handled in a structured, timely, and well-communicated manner. 

This role acts as the central point of coordination across internal teams and the SOC provider, owning the end-to-end incident management workflow rather than hands-on technical analysis. The focus is on orchestration, stakeholder communication, action tracking, and continuous improvement of incident response processes. 

This role will be suited to someone with a SOC background looking to move into an incident management-focused role, or an experiences service/operational incident manager looking to transition into security incident response. 

Please note: this is a hybrid role, requiring you to work onsite at our customer's office in London 2 days per week.  

Required Experience:

• Strong experience managing incidents in a structured, operational environment, ideally within a security or technology context
• Clear understanding of how incidents progress end-to-end (triage, escalation, coordination, resolution, post-incident review) 
• Experience working with third-party or managed service providers, ideally in a SOC or similar outsourced model 
• Excellent communication skills, with the ability to provide clear, timely updates to both technical and non-technical audiences 
• Highly organised, with strong action tracking and follow-through capabilities 
• Comfortable operating in high-pressure, fast-moving situations and managing multiple workstreams simultaneously 

Key responsibilities & duties include:

• Coordinate the response to security incidents from initial triage through to resolution 
• Act as the central lead for incident communications, meetings, action tracking, and stakeholder updates 
• Manage and mature the operational relationship with the SOC provider, ensuring effective detection, escalation and response 
• Ensure the right technical and business stakeholders are engaged at the right time during incidents 
• Maintain clear incident reports, documentation, and post-incident reviews (including lessons learned and post mortems) 
• Support the development and refinement of incident severity levels and major incident processes 
• Ensure incidents are managed in line with agreed processes 
• Coordinate closely with the out-of-hours incident teams, ensuring continuity and effective handovers where required 
• Drive continuous improvement in incident response operations, documentation and supplier engagement 
• Proactively introduce and connect key internal stakeholders with the SOC and wider incident response ecosystem  

Desirable Experience:

• Background in a Security Operations Centre (SOC), either as an analyst or in an incident management capacity 
• Familiarity with managed SOC models and early-stage vendor relationships 
• Experience contributing to or improving incident response processes, runbooks or governance