Incident Response – Engagement Coordinator in Manchester

S-RM is a global intelligence and cyber security consultancy. Since 2005, we've helped some of the most demanding clients in the world solve some of their toughest information security challenges. We're committed to developing sharp, curious, driven individuals who want to think critically, solve complex problems, and achieve success. Our culture values wellbeing, learning, and ideas.

Our Cyber Security division is the fastest-growing part of S-RM. The cyber sector is always evolving, and our Advisory, Ethical Hacking, and Incident Response practices are in more demand than ever. We're building a team to meet this challenge. We don't get too hung up on hierarchy or bureaucracy. If your ideas are good enough, we'll empower you to implement them. If you're the best person to talk to a customer, you'll get that opportunity, regardless of the title in your email signature. And when you need a hand, your team will always have your back. We also don't believe there's a typical cyber security professional. We've built a team of intelligence analysts, technical specialists, software developers, investigators, risk managers, and more. You'll always find a range of perspectives and expertise to help you learn and grow.

The Incident Response Engagement Coordinator supports S-RM's Incident Response teams by owning and coordinating the administrative, operational, and process-driven activities required to successfully run cyber incident response engagements. This role provides end-to-end case administration support across the incident lifecycle enabling Engagement Leads (ELs) and senior Incident Response leadership to focus on client management, technical oversight, and strategic decision-making. The role acts as part of a central operational hub, working closely with Engagement Leads, management, the wider Operations team, Finance, and external stakeholders (counsel, insurers, end clients) to ensure cases are launched, managed, and closed in a consistent, efficient, and well-governed manner.

Responsibilities

• Case Onboarding: Support case intake and kick-off activities, including acknowledging incoming requests for scoping calls and coordinating such calls with ELs and senior IR management. Initiate internal case automation and onboarding workflows. Ensure accurate case setup across internal systems and tooling. Assist ELs in coordinating early-stage logistics to ensure cases move smoothly from intake to active response. Act as an administrative point of contact during the initial stages of an engagement to reduce friction and delays.
• Letters of Engagement (LOEs) and Contracts: Prepare, issue, and manage LOEs at the direction of ELs and other consultants. Distribute LOEs to legal counsel, insurers, and clients, including via DocuSign where required. Track LOE execution status, proactively chase signatures, and confirm completion. Coordinate kick-off readiness once LOEs are fully executed, escalating issues or delays as needed.
• Budget Management: Support ELs in tracking budget consumption and maintaining financial oversight throughout engagements. Help coordinate uplift requests at the direction of ELs, including tracking hours used vs approved budgets, supporting preparation and circulation of uplift requests, and following up on approvals with insurers, counsel, or internal stakeholders. Work closely with ELs and Finance to maintain accurate and up-to-date financial data.
• Revenue Control: Monitor billable time entry on a weekly basis, following up with consultants to resolve gaps and chase any missing time entry. Report Work in Progress (WIP) to Finance and support accurate forecasting and budget visibility on a monthly basis. Ensure WIP integrity, validating that all time held is justified and chargeable. Coordinate fast and accurate invoicing with the Senior Billing Coordinator at Engagement Lead direction, including collating the required information and supporting invoice approval workflows. Ensure accurate cross-charging of billable time across relevant practice areas. Support payment chasing in coordination with Finance/Credit Control, escalating overdue items where appropriate. Cleanse non-billable codes monthly to ensure financial hygiene.
• Case Offboarding: Coordinate case close-out procedures, including issuing data deletion notices and tracking notice periods. Handle data deletion and decommissioning of case-specific platforms and tooling instances. Ensure case data is fully and accurately captured in internal platforms. Support introductions to Managed Services and Risk and Resilience teams where applicable. Track closeout completion and elevate gaps or issues as needed.
• Stakeholder and Internal Coordination: Act as a reliable operational interface between consultants, senior leadership, the wider Operations team, Finance and Credit Control, and external stakeholders where required. Ensure information flows efficiently, issues are escalated, and that administrative actions do not become bottlenecks for delivery teams.

Our Benefits:

• 25 days holiday per year in addition to bank holidays (+1 day for every year of service up to a maximum of 30 days).
• Matching pension contribution up to 7% (up to a maximum of 14% combined), and financial education.
• Life Insurance 4X Annual salary.
• Parental Support: Fertility treatment leave – 5 days of leave per cycle of treatment per year. Maternity leave – 26 weeks of full pay followed by 13 weeks of half pay. Paternity leave – 6 weeks of full pay.
• Various Health and Medical Benefits including: Private dental and medical insurance (taxable benefit). Virtual GP for you and your family members that live in the same household. Gym discounts for you and your partner. EAP programme for you and your immediate family. Free access to the mindfulness app Headspace.

The successful candidate must have permission to work in the United Kingdom by the start of their employment.