Security Incident Management Lead in Hatfield

Location: UK - Hatfield, UK - London, UK - Milton Keynes, UK - Nottingham, UK - Reading

Life on the team

As the Security Incident Management (SIM) Lead, you will shape and define how Computacenter responds to and prepares for cyber incidents. This role is responsible for building, maintaining and evolving the end-to-end security incident management framework, alongside owning a structured security incident exercise programme that ensures the organisation is ready to respond when it matters.

You will own how Security Incident Management operates across Cyber Security, ensuring the framework is clear, effective and continuously improved, from triage through to response and testing. This includes designing and running realistic incident exercises that challenge both our processes and our people, ensuring gaps are identified and embedded back into the framework to improve readiness over time.

Working across Cyber operational teams and wider in a matrix environment, you will bring consistency to both how incidents are handled and how preparedness is measured, ensuring that processes, playbooks and expectations are understood, tested and embedded. You will also own key deliverables including the Monthly SIM Review, contributions to the annual security risk review, and routine reporting.

When required, you will step in to manage incidents, working alongside the SIM team to provide additional surge capacity and support the end-to-end management of incidents.

What you’ll do

• Own and evolve the end-to-end Security Incident Management process, ensuring it is clear, effective, and embedded across teams.
• Develop, maintain, and improve incident playbooks, workflows, and procedures, keeping them aligned to threat, risk, and operational needs.
• Design and run the annual security incident exercise schedule, covering low level tabletop exercises through to complex, cross-team simulations.
• Lead the planning and execution of exercises, ensuring clear objectives, measurable outcomes, and actionable improvements.
• Use lessons learned from incidents and exercises to drive continuous improvement in response capability and resilience.
• Act as the senior escalation point for priority incidents, providing leadership, coordination, and decision support when required.
• Support incident triage and routing across SIM, Major Incident Management (MIM), and Cyber Support Services (CSS).
• Own the Monthly SIM review and reporting, providing clear insight, trends, and recommendations to stakeholders.

What you’ll need

• Proven experience building, leading and maturing cyber security incident management capability within a complex, global organisation.
• More than 5 years’ operating at a senior level in security / incident management, with credibility gained in large, complex, global organisations.
• Strong track record of defining and improving end-to-end security incident management frameworks, not just operating within them.
• Extensive experience designing and delivering security incident response exercises, from large-scale, multi-team simulations to smaller cross team tabletop exercises.
• Demonstrable experience embedding playbooks, processes and governance across operational teams, driving consistency and maturity.
• Ability to translate lessons learned, threat intelligence and industry best practice into tangible improvements in capability and resilience.
• Comfortable providing decisive leadership during live cyber incidents when required, while maintaining a focus on improving the overall operating model.
• Strong stakeholder management, able to work across technical and non-technical teams and bring alignment in a matrix environment.
• Experience driving continuous improvement at pace, identifying gaps, challenging existing approaches and delivering measurable outcomes.