Senior Manager, Cybersecurity Incident Response
Lead Arm’s global cybersecurity incident response team, directing investigations, briefings, and post-incident reviews to protect against cyber threats across the US, UK, and India.
- Compensation
- Not disclosed
- Location
- Cambridge, United Kingdom
- Work setup
- Hybrid
- Seniority
- Senior
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Demonstrable experience progressing from hands-on technical incident response into leadership, including leading incident response teams and investigators through diverse, complex cyber investigations
- Experience leading major cyber incidents, including incident command, stakeholder coordination, technical investigation, communications and post-incident follow-up.
- In-depth knowledge of the cyber security threat landscape and experience bringing it to bear in a tailored response to a major incident.
- Solid grasp of CDO and Incident Response processes and experience with relevant tools such as EDR, SIEM, IR management, forensics and case management platforms.
Nice to have
- BSc or higher in relevant subject (e.g Computer Forensics, digital investigation, computer science), applicable Professional qualification e.g SANS, CISSP, GCIH, GCFA, GCFE, GREM SANS Certifications,
Full description
Job Overview:
Interested in defending a global tech company from the latest cyber threats? Arm is seeking a passionate, experienced Senior Manager of Cybersecurity Incident Response to join our growing Cyber Defence Operations (CDO) team, protecting Arm against current and future cyber-attacks! Situated within Arm’s Enterprise Security function, this role will lead Arm’s global incident response team across the US, UK and India, including acting as a senior technical and operational leader for major cyber incidents.
CDO enables Arm to be successful, delivering scalable and defendable security services that not only provide for the protection of Arm, customer & partner data, but that enables advantage in a competitive industry.
Responsibilities:
- Lead Arm’s global cybersecurity incident response function, ensuring the team has the people, processes and capabilities needed to respond effectively across regions.
- Lead high-priority and complex security incidents in partnership with partners across the business.
- Facilitate major incident briefings, direct response activities, and deliver clear communications for technical teams, senior stakeholders and Arm leadership.
- Coordinate larger investigations with internal partners, contracted security providers and/or law enforcement.
- Grow and develop the Incident Response team through coaching, training, skills development and continuous improvement.
- Build and maintain incident response runbooks, playbooks and operating procedures to support consistent, high-quality response.
- Support incident readiness through planning, exercises and scenario-based testing.
- Lead post-incident reviews, including root cause analysis, lessons learned and control improvements.
- Provide Incident Response insight to Detection Engineering, Threat Hunting, Exposure Management and other Cyber Defence Operations capabilities.
Required Skills and Experience:
- Demonstrable experience progressing from hands-on technical incident response into leadership, including leading incident response teams and investigators through diverse, complex cyber investigations.
- Experience leading major cyber incidents, including incident command, stakeholder coordination, technical investigation, communications and post-incident follow-up.
- In-depth knowledge of the cyber security threat landscape and experience bringing it to bear in a tailored response to a major incident.
- Solid grasp of CDO and Incident Response processes and experience with relevant tools such as EDR, SIEM, IR management, forensics and case management platforms.
“Nice To Have” Skills and Experience:
- BSc or higher in relevant subject (e.g Computer Forensics, digital investigation, computer science), applicable Professional qualification e.g SANS, CISSP, GCIH, GCFA, GCFE, GREM SANS Certifications, EnCE, Incident Response (CSIRT/CERT) (Desirable)!