This role involves owning the end-to-end incident response lifecycle, acting as Incident Commander during major security events, and managing the SOC team's operational effectiveness. The manager will build and mature the incident response programme by developing scenario-specific playbooks, driving post-incident reviews, and executing tabletop exercises. Responsibilities include managing KPIs like MTTD and MTTR, maintaining threat intelligence pipelines, and coordinating with legal and compliance teams during regulatory incidents.




