Lead, Global Threat Investigation & Incident Response

About the role

The Cyber Threat Incident Response team protects a global financial services group by leading investigations and incident response activities. As the Lead for Threat Investigation and Incident Response you will manage a distributed team, oversee the full incident response lifecycle and drive continuous improvement of security operations.

Key responsibilities

• Lead a global team of investigators and responders across multiple regions, ensuring 24/7 coverage through a follow‑the‑sun model.
• Own the end‑to‑end incident response lifecycle, from detection and triage to containment, eradication and post‑incident review.
• Manage high‑severity cyber incidents, coordinate escalations and communicate status to senior stakeholders.
• Develop and implement process improvements, automation and platform enhancements to strengthen cyber resilience.

Required profile

• 10+ years of experience in technology or cyber security, including at least 3 years in a leadership role within a global enterprise.
• Proven ability to build high‑performing teams through mentoring, technical training and cyber‑simulation exercises.
• Strong communication and stakeholder‑management skills, capable of translating complex threats into business‑focused outcomes.

Required skills

• Deep expertise in managing the full incident response lifecycle.
• Experience with global follow‑the‑sun operating models and major incident escalations.

What we offer

• Wellbeing leave, additional service bonus days and generous parental leave options.
• Paid volunteer leave, donation matching and gender affirmation leave.
• Employee Assistance Program, health checks and flu vaccinations.
• Hybrid and flexible working arrangements, home‑office equipment reimbursement and extensive learning & development opportunities.