Cyber Response and Recovery Manager in London

Vacancy detailCyber Response and Recovery Manager 75,000 - 85,000 GBPHybrid WORKINGLocation: Manchester, Central London, Greater London – United Kingdom Type: PermanentWe are seeking an experienced Cyber Response & Recovery Manager to join a specialist Cyber Response Services team, supporting clients through some of their most complex and critical cyber incidents.This role focuses on the recovery and remediation phase following major cyber incidents, helping organisations restore critical services, rebuild compromised environments, remove attacker persistence, and strengthen their long-term cyber resilience.You will work alongside incident response teams, forensic specialists, technology teams, senior stakeholders and client leadership to translate incident findings into practical recovery and remediation plans.The RoleThis is a hands-on cyber recovery role, rather than a traditional incident response position. You will support clients during the most operationally critical stages of a cyber incident, helping them safely recover and improve their security foundations.Key responsibilities include:Leading cyber recovery and remediation workstreams during major incidents.Supporting recovery from incidents including ransomware, destructive malware, Active Directory compromise, cloud compromise and advanced network intrusions.Delivering hands-on remediation across enterprise environments including Windows, Linux, Active Directory, cloud and network infrastructure.Removing attacker persistence and restoring trust across compromised environments.Supporting identity recovery, infrastructure rebuilds, patching and vulnerability remediation.Reviewing and improving network architecture, segmentation and security controls to reduce future risk.Designing secure recovery approaches including isolated recovery environments, backup validation and restoration strategies.Developing phased recovery plans covering immediate stabilisation, remediation and long-term security improvements.Managing stakeholders across technical teams, executives, legal advisers, insurers and incident response teams.Essential ExperienceThe successful candidate will have:Active SC Clearance.Strong experience across cyber security, incident response and recovery.Hands-on infrastructure and systems administration experience.Experience supporting cyber incident recovery activities, including ransomware, network intrusions or compromised environments.Strong technical knowledge of:Active DirectoryWindows ServerLinuxEnterprise networkingCloud environments (Azure/AWS/M365)Experience leading technical workstreams during high-pressure incidents.Ability to translate technical findings into clear remediation plans and business-focused recommendations.Strong stakeholder management and communication skills.Desirable ExperienceExperience in the following areas would be beneficial:Active Directory recovery and hardening.Identity security and privileged access management.Secure system rebuilds and restoration of critical services.Network segmentation and firewall architecture.Backup recovery strategies and resilience planning.Cyber recovery roadmaps and remediation programmes.Managing complex client engagements and mentoring junior team members.If you think this role is a strong fit, we'd love to hear from you. Reference: AMC|CLI|CRRMPostcode: EC#coliApply for this vacancyYour CV will be sent to the selected department. At no time will your CV be sent outside of Anson McCade without your authorisation.*Mandatory field.Your name*Your surname*Your email address*I confirm I currently have the right to take full time employment at the location for which I am submitting my CVPlease state the locations where you currently have the right to take full time employmentAttach a file (Word or PDF only accepted)MessagePrior to submission of this form, the user acknowledges and accepts Anson McCade's Terms and Conditions of Use + Privacy Policy + Data Protection Compliance Statement* I acknowledge and accept TrustpilotOur OfficesVacancy searchSearch all the vacancies on Anson McCade Select a Practice Area Quantitative Research, Trading & Risk Digital + Analytics Information Technology + Cyber Security Business Change and Transformation + Strategy IT / Software Sales Internal Positions at Anson McCade