Cyber Incident Manager

Role: Cyber Incident Manager

Duration: 5 Months

Location: UK Remote

Day Rate: £500 Inside IR35

Active SC clearance required due to project restrictions

Overview

We are seeking an experienced Cyber Incident Manager to join a high-profile programme supporting a secure government environment. The successful candidate will lead the coordination, management, and resolution of cyber security incidents, ensuring rapid response, stakeholder engagement, and continuous service improvement.

This role requires a proactive individual with strong communication skills, experience managing complex cyber incidents, and the ability to operate effectively within secure and highly regulated environments.

Key Responsibilities

Lead the end-to-end management of cyber security incidents and major security events.
Coordinate technical response teams during security incidents, ensuring timely containment, eradication, and recovery activities.
Act as the primary point of contact for cyber incident communications and stakeholder updates.
Facilitate incident response bridges and war-room activities during critical incidents.
Ensure incidents are appropriately prioritised, investigated, documented, and escalated.
Produce post-incident reports, lessons learned documentation, and root cause analysis findings.
Work closely with Security Operations Centres (SOC), security analysts, infrastructure teams, and third-party suppliers.
Monitor incident trends and provide recommendations for improving cyber resilience.
Support the development and enhancement of incident response processes, playbooks, and procedures.
Ensure compliance with organisational security policies and industry best practices.

Essential Skills & Experience

Active SC Clearance.
Minimum 5 years' experience within Cyber Security, Incident Management, or Security Operations environments.
Proven experience leading and managing cyber security incidents from initiation through to resolution.
Strong knowledge of incident response methodologies and cyber security frameworks.
Experience working with SIEM, EDR, and threat intelligence platforms.
Excellent stakeholder management and communication skills.
Ability to coordinate multiple technical teams during high-pressure incidents.
Strong analytical and problem-solving skills.
Experience producing executive-level incident reports and recommendations.

Desirable Skills

Certifications such as CISSP, CISM, GCIH, CompTIA Security+, or equivalent.
Experience within Government, Defence, National Security, or Critical National Infrastructure sectors.
Knowledge of NIST, ISO 27001, Cyber Essentials, and NCSC guidance.
Experience working within Security Operations Centres (SOC).If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website