Lead Incident Response Manager - Build It, Lead It, Own It

Lead Incident Response Manager - Build It, Lead It, Own It

£125,000 + bonus Hybrid (Manchester-based) Clear path to Technical Director

When a cyber incident hits, you are the calm in the chaos.
You take control, make the decisions, and guide clients through the storm.

This is your opportunity to lead a fast-growing Incident Response function within a rapidly expanding UK cyber practice that is winning major contracts and investing heavily in its capability.

You will have the freedom to build the function your way, lead high-impact response work, and progress to Technical Director of Cyber within 12 to 18 months.

Why This Role Stands Out

• Lead the full incident response lifecycle from triage and containment to negotiation and recovery

• Work directly with senior stakeholders and executive teams, trusted as the safe pair of hands when it matters most

• Join a cyber business that is scaling quickly and building one of the strongest response teams in the UK

• Full autonomy to shape the team, tooling, and playbooks

• Competitive salary, flexible package, and a defined path to board-level progression
  

What You Bring

You are credible, composed, and technically sharp. You can brief a board in the morning and work through a live incident in the afternoon.

Experience that will stand out:

• Proven experience leading or coordinating major incident response cases such as ransomware or business email compromise

• Strong communicator who is clear, concise, and confident with senior stakeholders

• Practical understanding of digital investigation and recovery tools such as Magnet, MCase, or virtualisation platforms

• Background in consultancy, MSSP, or enterprise incident response environments

• Relevant certifications such as CREST IM, GCFA, GCFE, or CISM

• Based in or commutable to Manchester (hybrid working)
  

The Setup

• £125,000 base (flexible for the right person) plus potential bonus

• Hybrid working model with Manchester HQ collaboration

• Two-stage interview process (Teams followed by onsite)

• Backed by a leadership team that values independence, delivery, and trust

If you are a hands-on incident response leader who thrives in high-stakes situations and wants to build and grow a function of your own, this is the perfect next step.

Apply in confidence or get in touch for a confidential discussion.

Desired Skills and Experience
When a cyber incident hits, you are the calm in the chaos.
You take control, make the decisions, and guide clients through the storm.
This is your opportunity to lead a fast-growing Incident Response function within a rapidly expanding UK cyber practice that is winning major contracts and investing heavily in its capability.
You will have the freedom to build the function your way, lead high-impact response work, and progress to Technical Director of Cyber within 12 to 18 months.