Incident Management Coordinator

Position Summary

We are recruiting on behalf of a client in the Critical National Infrastructure (CNI) sector for a Cyber Incident Management Coordinator to deliver, evolve, and implement the organisation's approach to managing cyber incidents, including processes, roles, and escalation paths. This newly established role supports the Cyber Incident Team Lead in embedding cyber incident response practices, aligning with regulatory frameworks such as the Cyber Assessment Framework (CAF). You will work collaboratively across Cyber Security, HR, Finance, Legal, and Communications teams to deliver enterprise-wide outcomes and drive incident preparedness.

What you'll do

·Deliver the Cyber Incident Management capability across the organisation, aligned to CAF Objective D and the broader Cyber Security strategy

·Aid in the development and implementation of the Cyber Incident Management Plan (CIMP)

·Focus on a site-wide coordinated response

·Drive and facilitate evaluation of the incident preparedness programme to ensure effectiveness and alignment with business needs

·Coordinate with HR, Training, Communications, Finance, and the wider organisation in educating, understanding, and rehearsing roles & responsibilities during a cyber incident

·Design and facilitate development programmes to enhance incident preparedness

·Coordinate and enhance post-incident reviews for cyber incidents, ensuring continuous improvement

·Perform Cyber Incident Exercises (CIE) to various audiences to enhance incident preparedness

·Act as an incident commander when an incident arises, bringing necessary resources together to drive resolution

·Act as an SME within the incident management and cyber operations consultancy pillar

·Contribute to the enhancement of the Cyber Incident Response (CIR) capability

·Facilitate relationships with external providers and institutions to support the capability pipeline and training delivery

·Represent Cyber Security & Assurance in internal forums, promoting best practice and continuous improvement

What we're looking for

·Experience in cyber incident response or cyber operations, with exposure to incident preparedness programmes

·Understanding of cyber security principles, particularly within cyber operations and incident response

·Excellent communication and stakeholder engagement skills

·Experience in designing and delivering training and exercising content across varied formats

·Familiarity with regulatory frameworks such as the CAF

·Demonstrable experience of working in complex organisations with diverse stakeholder groups

·Degree or equivalent experience in Cyber Security, Computer Science, or a related field

·Desirable: Professional certifications such as SANS Cyber Incident Management or similar; experience working in or with nuclear or regulated industries; understanding of the organisation's operations and ICT estate; experience in capability development, workforce planning, and strategic resource management

What's on offer

·Annual bonus of up to 15%, made up of company and personal performance

·Attractive defined contribution pension scheme – company matches up to 13.5% for a 7% employee contribution

·30 days annual leave + bank holidays, plus ability to purchase an extra 2.5 days per year

·Ability to carry over 10 days annual leave each financial year

·Apply for more info!