Outbreach is seeking a Director of Cyber to lead the whole of our technical delivery, from first response through to the final report.
Outbreach is looking for a Director of Cyber to lead the whole of our technical delivery. This is the most senior delivery appointment in the business and it owns everything a client experiences from the first call to the final report. We are NCSC Cyber Incident Response Assured and we work across the UK and the UAE for insurers, instructing solicitors and organisations in the middle of a bad week. Our reports go in front of regulators and courts, so they are held to an evidential standard rather than a marketing one. You would lead five practices: the Response Desk that owns the clock, Forensics that owns the evidence, Threat Intelligence, Advisory and Readiness, and Recovery and Restoration. Key Responsibilities:
- Delivery Quality: Own the standard of everything we produce across all four engagement phases, Plan, Prepare, React and Recover.
- Response Performance: Own the duty rota and first response performance, including our four hour Initial Assessment commitment, across UK and UAE time zones.
- Technical Authority: Act as the senior authority on litigation grade reports, including the Statement of the Investigator, chain of custody and evidence handling under the ACPO Good Practice Guide.
- Leadership: Lead and develop the practice heads, and build out the grade structure beneath them as the team scales.
- Commercial Ownership: Own utilisation, engagement margin and the resourcing decisions that sit behind both.
- Escalation: Act as the escalation point on major incidents, including the client conversations nobody else can take.
- Methodology: Own the methodology, the playbook estate and the tooling baseline, and keep them current from real incidents.
- Client and Framework Support: Support the retained client base and public sector frameworks with the technical content of bids and service reviews.
- Assurance: Maintain our NCSC CIR Assured status and the evidence behind it.
Skills and Experience:
- Delivery Leadership: Substantial experience leading incident response delivery in a consultancy, an MSSP or a large in house CSIRT.
- Technical Credibility: Personally credible on digital forensics and incident response. You should be able to sign a report you did not write and defend it.
- Evidential Standards: Experience of privilege, disclosure, chain of custody, expert witness work or supporting instructing solicitors.
- On Call Operations: Track record of running an on call rota and hitting response SLAs, including out of hours.
- People Management: Line management of senior technical people, with real examples of developing them.
- Commercial Literacy: Comfortable with utilisation, margin, scoping and change control.
- Stakeholder Presence: Able to hold a room with a board, an insurer or a regulator during a live incident.
- Composure: Calm under sustained pressure, and able to hold a standard when a client is pushing for speed.
- Eligibility: Right to work in the UK.
Highly Desirable (But Not Essential):
- GIAC certifications such as GCFA, GCFR or GREM, or CREST equivalents.
- Experience of NCSC CIR or a comparable national assurance scheme from the inside.
- Cloud incident response depth, particularly Microsoft 365 and Azure.
- Experience delivering into the GCC, or working with UAE regulators.
- Expert witness experience.
This role carries genuine on call responsibility. Incidents do not respect the calendar, and the Director of Cyber is the person the team escalates to. In return you get a practice of around twenty five people to build, a clean sheet on grade structure and process, and direct access to the CEO.
#J-18808-Ljbffr
