The successful candidate will bring significant experience in cyber incident response, security operations or digital forensics, with a strong track record of leading multidisciplinary teams through major incidents. You will have experience operating within regulated or critical infrastructure environments and an understanding of the unique challenges associated with OT and IT systems. Knowledge of threat-led detection engineering, adversary frameworks such as MITRE ATT&CK and ICS ATT&CK, and cyber threat modelling methodologies will be highly valued.
You will be comfortable engaging with senior stakeholders, translating technical incidents into business and regulatory impact, and providing clear decision-making support during high-pressure situations. Experience managing MSSP relationships, contributing to crisis communications and executive-level reporting, and driving continuous improvement through post-incident reviews will be important for success in the role.
Professional certifications such as GCIH, GCFA, GNFA, CREST Incident Manager, ICS515 or ICS418 are desirable but not essential, alongside knowledge of IEC 62443 and cyber security frameworks relevant to critical national infrastructure. The ability to achieve SC Clearance is essential.
This is an excellent opportunity for a cyber security professional who combines deep technical expertise with strong leadership capability and thrives in fast-paced, high-consequence environments. In return, you will have the opportunity to influence cyber resilience at an organisational level, shape strategic incident response capability and play a key role in protecting critical operations.
Candidates must speak english to a native level/proficiently.