Information Security

Cyber Incident Manager

Morgan Stanley

Glasgow · Glasgow City · United Kingdom

Overview

In this Cyber Incident Manager role, you lead and coordinate global cyber event responses, ensuring swift containment and clear communication across stakeholders. You work with the Fusion Cyber Enterprise Management team to mitigate business risk and safeguard operations in a 24/7, global setting. You’ll drive preparedness, run post-incident reviews, and develop playbooks to continuously improve resilience. This role sits at the intersection of cyber, technology, and business risk, offering a meaningful chance to shape incident response at scale.

Pay / Benefits
  • Flexible work arrangements
  • Competitive benefits package
  • Opportunities for career mobility
  • Diversity and inclusion commitment
  • Supportive, collaborative culture
Responsibilities
  • Own assigned incidents and preparedness activities, exercising independent judgment
  • Coordinate cross-functional workstreams (forensics, data impact, external communications) to mitigate risk
  • Manage escalations by assessing risk/incident severity and engaging stakeholders
  • Provide timely incident communications across levels of the organization
  • Lead post-incident reviews to document lessons and identify risk owners
  • Develop incident scenarios, playbooks, and response drills with key stakeholders
  • Support EMEA CEM coverage and collaborate with cyber, technology and business teams
Key requirements
  • Practical cybersecurity experience and ability to interpret technical findings for incident response and business risk
  • Crisis management ability to lead large, geographically dispersed conference calls
  • Strong prioritisation, judgment, and ability to distill complex information into business terms
  • Experience coordinating technical and non-technical workstreams to mitigate impact
  • Proactive learner with openness to feedback and skill gaps
  • Experience in global, 24/7 operations and in regulated environments
  • Certifications such as CISSP, CISM or SANS (GCIH, GSEC) or equivalent practical experience
  • Ability to translate operational needs into tooling requirements and collaborate with technology teams
  • Excellent verbal and written communication
  • Calm under pressure and decisive leadership
  • Cross-functional collaboration
  • Cyber incident response
  • Forensic coordination
  • Risk assessment and severity scoring

Reference: WJ-747_31226997

Find more on GigBlows

This role is listed on GigBlows for discovery and search. Hiring decisions and applications are handled by the employer or their chosen application system.