12 of 12 Permanent Incident Management Jobs in Scotland

high a level of security operations delivery function Oversee and enhance security monitoring systems to detect and analyse potential security incidents. Conduct real-time analysis of security events and incident and escalate as necessary Support other teams on investigations into incidents, determining the root cause and impact. Document findings and lessons learned to improve incident response procedures. Ensure … runbooks are followed and are fit for purpose Incident Response: Lead and coordinate incident response activities to effectively contain, eradicate, and recover from security incidents. Develop and maintain incident response plans, ensuring they align with industry best practices. Escalation management in the event of a security incident Follow major incident process Threat Intelligence: Stay … improve detection capabilities. Generate detailed reports on emerging threats, attack trends, and security posture improvements. Monitored and analysed security logs from SIEM platforms to identify suspicious activity. Security Tool Management: Manage and optimise SIEM tools, ensuring they are properly configured and updated to maximize effectiveness. Own the development and implementation of SOC Use Cases Evaluate new security technologies and More ❯

Move to Skip to Content Link Select how often (in days) to receive an alert: Date: 7 Aug 2025 Location: Edinburgh, GB Company: Royal London Group Job Title: Cyber Incident Response Analyst Contract Type: Full time Permanent Locations: Edinburgh/Glasgow/Alderley Park/London Working style: Hybrid 50% home/office based Closing date: 20th August … This role will assure the response to a cybersecurity event or incident, taking the lead to contain the threat to the Royal London business and support the remediation activities to stabilise service. The role will coordinate activities between Defence, Threat Intelligence, SOC, and Engineering, and be the point of contact for IT Security within the Royal London Group incident management process. The team's purpose is to minimise and control damage resulting from cybersecurity incidents, ensuring that the appropriate incident management and response controls are in place and operating as required to enable the identification, protection, detection, response, and recovery of RLG information assets. It outlines how the role contributes to our purpose: Helping build More ❯

an exciting opportunity to play a key role in shaping the transformation journey of enterprise clients. The role will suit professionals with a strong background in SOC service delivery , incident response coordination , and vulnerability management . Key Responsibilities: Act as the primary liaison between clients and internal operational delivery teams, ensuring seamless communication and service excellence. Serve as … the key escalation point for clients, managing security incidents from detection to resolution. Lead coordination efforts across Security Operations Centre (SOC), Incident Response, and technical teams during major incidents. Identify impacted systems, users, and business functions, and ensure timely stakeholder communication. Oversee remediation and containment activities and coordinate post-incident investigations and reporting. Ensure all service delivery teams … and deliver weekly or monthly service review reports for stakeholders. Support the review and optimisation of service delivery processes, ensuring continuous improvement and implementation of best practices. Lead vulnerability management initiatives: Perform risk-based vulnerability scanning across systems, applications, and networks. Prioritise vulnerabilities by risk level and asset criticality, coordinating remediation with business stakeholders. Manage and maintain IDS and More ❯

seamless technology operations that enable our consultants and internal teams to deliver exceptional client services. This role is critical in maintaining business continuity by providing first-line technical support, incident management, and problem resolution while upholding the highest standards of information security that our clients expect. Technical Support & Incident Management Provide technical support via phone, email … network issues Triage and prioritise incoming support requests based on business impact and urgency Diagnose and resolve technical problems or escalate complex issues to appropriate specialist teams Maintain detailed incident records and ensure timely communication with end users System Administration & Maintenance Perform routine maintenance tasks on servers, workstations, and network infrastructure Manage user accounts, permissions, and access rights across … Monitor system performance and proactively identify potential issues before they impact operations Security & Compliance Ensure all support activities comply with cybersecurity best practices and industry standards Assist with security incident response when required, following established protocols Maintain strict confidentiality of sensitive client and company information Support compliance audits and security assessments as needed Documentation & Process Improvement Create and maintain More ❯

you will: Act as a bridge between the Customer and the Operational Delivery Teams Act as a primary escalation point of contact to the customer Coordinate the Security Operations, Incident Response Teams and other technical resources needed to troubleshoot major incidents to determine the affected/vulnerable systems, affected/vulnerable users Identify any business areas impacted and coordinate … communications with all relevant stakeholders as per Major Incident Management process. Coordinate the remediation and containment activities as advised by either the NTT DATA SOC or Incident Response Team. Oversee, support, and manage through to completion the investigative and remediation activities in conjunction with relevant support teams. Coordinate post incident investigation with relevant teams or third … Manager in review of any service delivery processes and workflows, identifying areas for optimization and implementing best practices. Co-ordinate the running and reporting of a risk-based vulnerabilities management including: Scanning systems, networks, and applications to detect potential security weaknesses. Prioritize vulnerabilities based on their risk level, potential impact, and the criticality of the affected assets, ensuring that More ❯

work together. Is proficient in the collection, analysis and application of historical test measurements and future estimation. Is proficient in the principles, methods, techniques, and tools for the effective management of the testing process and the execution of tests throughout the lifecycle of development projects. Examples: organisation standards for testing, planning & estimating, configuration management, incident management, test efficiency and effectiveness measurement. Is proficient in methods and techniques for the assessment and management of business risk. Is expert in specific standards, practices, appraisal, and certification programs associated with testing. Has experience of using and leading teams using automated test tools. Has specialist knowledge and skills in one or more function, technology, or automation tool. Has … and applications within the protection business domain. About Royal London We're the UK's largest mutual life, pensions and investment company, offering protection, long-term savings and asset management products and services. Our People Promise to our colleagues is that we will all work somewhere inclusive, responsible, enjoyable and fulfilling. This is underpinned by our Spirit of Royal More ❯

customer, project, and support teams. • Manage escalations and Major Incidents. • Work with account teams on contractual negotiations for renewals. • Report on client profit and loss KPIs. • Ownership of Service Management processes and their documentation in IT Glue. • Ownership of the transition process of Managed Service customers from pre-sales to operational support. • Capacity planning of support teams to ensure … performance and customer satisfaction. • Create customer excitement. Stimulate customer demand by ensuring service roadmaps continue to evolve (work with operational teams to support you). • Develop an IT Service Management Plan (ITIL process delivery) to improve service consistency and reliability. Owning and delivering key processes including change, problem, and major incident management Skills/Experience: Experience of … Project and Operational Incident, problem, and change management within a complex environment. Strong partner management expertise, with demonstrable experience of navigating complex multi-vendor environments. Exceptional stakeholder engagement, influencing, and communication skills. Ability to work under pressure, multitask, and handle multiple assignments simultaneously. Excellent time-management and problem-solving skills. Strong technical background. Minimum of More ❯

in close partnership with our application support DevOps Labs to deliver deep insights using observability platforms such as Splunk and Dynatrace. Your responsibilities will involve providing direct support for incident response, root cause analysis, performance optimization, and system performance improvement! About us If you think all banks are the same, you'd be wrong. We're an innovative, fast … analysis using advanced technology. Analysis & Reporting: Conduct proactive analysis on system performance, availability and failures. Generate regular reports for senior stakeholders, summarising trends, anomalies and improvement opportunities. Support post-incident reviews with data driven insights. Tooling and Scripting: Develop scripts to automate data extraction, transformation and alert generation. Integrate observability tools with CI/CD pipelines and operational workflows. … Communication Skills - Clear verbal and written communication to interact with senior management, colleagues and support teams. Experience working in an Incident Management environment. And any experience of these would be really useful Familiarity with infrastructure, application architecture and cloud monitoring (AWS. GCP, Azure, OCP). About working for us Our focus is to ensure we're inclusive More ❯

and are expanding out into other AWS products such as ECS Fargate . Our IAC is a mix of Serverless framework and Terraform . We use JIRA for project management, Github actions for our CI/CD pipelines and Incident.io for our incident management process. For more detailed information, feel free to ask for our tech radar More ❯

assessments, including third-party suppliers. Applying threat modeling principles to complex system and solution designs to identify security risks and mitigation strategies. Supporting, monitoring, and recommending improvements to cyber incident management processes. Providing input and support to operational projects related to cyber security. Requirements Key skills and experience relevant to this role include: Experience working in an organization … ability to communicate IS security goals effectively. Excellent analytical, problem-solving, and execution skills. Strong cyber security-specific experience supported by relevant industry certifications (e.g., CySA+, Security+), and risk management knowledge. Knowledge and experience with a diverse range of cyber security tools, including SIEM, EDR, NIDS, etc. Self-motivated with a willingness to go the extra mile to achieve More ❯

is reliable, scalable, and secure. Ensure the reliability, availability, and scalability of the systems, platforms, and technology through the application of software engineering techniques, automation, and best practices in incident response. Accountabilities Build Engineering: Development, delivery, and maintenance of high-quality infrastructure solutions to fulfil business requirements ensuring measurable reliability, performance, availability, and ease of use. Including the identification … of the appropriate technologies and solutions to meet business, optimisation, and resourcing requirements. Incident Management: Monitoring of IT infrastructure and system performance to measure, identify, address, and resolve any potential issues, vulnerabilities, or outages. Use of data to drive down mean time to resolution. Automation: Development and implementation of automated tasks and processes to improve efficiency and reduce … actively contribute to the organization's technology communities to foster a culture of technical excellence and growth. Vice President Expectations Advise key stakeholders, including functional leadership teams and senior management on functional and cross functional areas of impact and alignment. Manage and mitigate risks through assessment, in support of the control and governance agenda. Demonstrate leadership and accountability for More ❯

and uptime. Perform system installations, configurations, and upgrades, adhering to best practices. Respond promptly to incidents, resolving issues within defined SLAs. Implement and manage system security measures, including patch management and vulnerability assessments. Collaborate with cross-functional teams to support infrastructure projects and deployments. Develop and maintain scripts to automate routine tasks and improve system efficiency. Document system configurations … certifications (e.g., RHCSA, RHCE) are highly desirable. Strong knowledge of Linux system administration, networking, and security. Proficiency in scripting languages such as Bash, Python, or Perl. Familiarity with configuration management tools (e.g., Ansible, Puppet). Excellent communication and teamwork skills. Ability to work under pressure and manage multiple priorities. Must be a UK sole national . Must be willing … challenges. Preferred Skills : Experience with virtualization technologies (e.g., VMware, KVM). Knowledge of cloud platforms (e.g., AWS, Azure) and containerization (e.g., Docker, Kubernetes). Understanding of ITIL processes and incident management. Benefits: Basic salary up to £45,000 35% shift allowance in addition to salary 25 days annual leave plus 8 public holidays Option to purchase up to More ❯