73 jobs for “Major Incident Manager”
Radius Consultancy
Strengthen and maintain cyber security posture through assurance, incident response coordination, vulnerability management and governance. Work with frameworks including ISO 27001, SOC2, NIST and GDPR, overseeing MSSP and SOC activities, with technical involvement in investigations, threat analysis and major incidents.
EDR · SIEM · NDR +1
Safran · 501–1000 people · Late stage
Lead information security across multiple UK sites for a defence and aerospace manufacturer, owning accreditation, compliance and incident response. Act as the key security point of contact within a global matrix, driving frameworks such as NCSC CAF, ITAR and export control, and supporting secure-by-design across IT, engineering and industrial teams. Requires regular UK and international travel.
NCSC CAF · IGI 1300
Genomics England · 101–500 people · Public
Architect secure, resilient network connectivity spanning AWS cloud platforms and on-premise infrastructure, supporting clinicians and researchers accessing sensitive genomic data. The role balances long-term network strategy with practical delivery, defining target architectures, standards and reusable patterns across cloud, hybrid, remote-access and partner connectivity. Involves designing AWS networking, hybrid multi-site connectivity, zero-trust security, and providing architectural governance through delivery.
AWS · Cisco · NVIDIA +7
Ricoh
Builds and operates secure, scalable platforms and services that take enterprise AI solutions from evaluation into production. Works across DevOps, cloud engineering and MLOps, configuring environments, CI/CD pipelines, automation, monitoring and identity controls alongside AI specialists, data scientists and security teams.
AWS · Azure · GCP +7
Randstad Technologies Recruitment
Senior cybersecurity partner for Global Finance & Technology domains at a global financial institution, owning the domain risk register and embedding security-by-design into change delivery and solution designs. Strengthens in-service posture across IAM/PAM, vulnerability management, logging and SaaS risk, and leads control governance and audit readiness. Hybrid role in Sheffield, three days a week in the office.
SaaS
Lavant Consulting
Hands-on architecture role within a board-sponsored vulnerability and patch management transformation at a major financial services organisation. You will redesign end-to-end patching and remediation processes, define future-state automation architecture and tooling, and drive backlog reduction across servers, networks, containers and databases, working with Infrastructure, Cyber Security, DevOps and Service Management teams.
ServiceNow · Kubernetes
Senior advisory role providing expert leadership on cyber risk management, security assurance and governance across large-scale public sector technology programmes. Involves assessing risks, reviewing technical designs and architectures, and embedding secure-by-design principles into cloud and digital transformation work while influencing senior stakeholders.
AWS · SaaS
Bangor University
Fully funded three-year PhD studentship researching physical-layer network security within Bangor University's DSP Centre, supported by EPSRC and regional innovation projects. The role involves theoretical and experimental work on optical, wireless and 5G/6G communications, joint communications and sensing, and signal processing, alongside publishing, presenting and assisting with undergraduate supervision.
Exceed Cyber limited
Strategic advisory and architecture role supporting a major network transformation for an international professional services organisation. Involves assessing existing network security environments, defining vendor-neutral target architectures and guardrails, evaluating Zero Trust, SASE/SSE, SD-WAN and segmentation, and translating decisions into procurement-ready requirements and supplier evaluation criteria.
SASE · SSE · SD-WAN +3
83zero
Hands-on engineering role deploying, configuring and troubleshooting Prisma Access, DLP, CASB and SSPM within a large enterprise SASE and cloud security transformation. You act as a trusted technical adviser, handling escalations, root cause analysis and data protection policy work alongside cybersecurity, networking and cloud teams.
Prisma Access · GlobalProtect · Palo Alto Networks +3
eFinancialCareers
Lead end-to-end delivery of complex cyber security and risk programmes for a major financial services organisation, covering identity management, data protection and enterprise risk. The role involves governance, planning, budgeting, RAID management and executive reporting, coordinating cross-functional teams, third-party suppliers and security specialists, with occasional UK travel.
identifi Global Resources · 11–50 people · Series A
Hands-on architect role at an Elastic partner, designing SOC and SIEM architectures on Elastic/ELK for UK Defence and NATO clients. You own the architecture with the client and stay close to delivery, supporting greenfield builds and recovering existing environments alongside a team of 30+ SMEs, mostly working remotely with occasional client-site visits.
Elastic · ELK · Elasticsearch +4
NRL Recruitment
Lead the design and implementation of secure OT/ICS cybersecurity architectures, conduct risk assessments and assurance activities, and apply frameworks such as IEC 62443, NCSC CAF, NIS Regulations and ONR SAPs. Provide technical leadership across critical national infrastructure, nuclear and defence programmes, engaging senior stakeholders and regulatory bodies, with some bid and client relationship work.
IEC 62443 · NCSC Cyber Assessment Framework · NIS Regulations +1
83zero
Lead cybersecurity advisory engagements for a global IT consultancy, covering risk assessments, maturity reviews, strategy and transformation roadmaps. Advise CISOs and CTOs, embed security into cloud and digital transformation programmes, and support bids and business development while mentoring junior consultants.
Avanti Recruitment
Client-facing security role within a UK consultancy's growing Security Architecture practice, supporting government, defence and critical infrastructure programmes. Day to day involves threat modelling, risk assessment, reviewing solution and infrastructure designs, defining security requirements and controls, and running client workshops. Suits security engineers or consultants wanting to move into architecture, with occasional client site visits rather than frequent travel.
NIST · SABSA · TOGAF +5
