Cyber Response & Recovery Manager

About the Role

The Cyber Response & Recovery Manager at KPMG UK works within the Cyber Response Services (CRS) Team in the Risk Consulting practice. Reporting directly to the head of cyber response, the role involves managing and coordinating cyber security incidents and performing digital forensics on critical incident data. This position is a key part of a high performing team that is one of only 9 tier 1 responders in the UK.

Responsibilities

• Manage and coordinate cyber security incidents, including on-call duties.
• Conduct digital forensics on disk, memory, network packets, and log files.
• Advise clients on the current cyber threat landscape.
• Liaise with clients on delivery, implementation, and project issues.
• Generate structured responses for bids and proposals.

Requirements

• Broad understanding of the cyber security threat landscape.
• Strong technical background in computers, networks, and programming.
• Extensive experience in managing cyber security incidents and responses.
• Knowledge of information security methodologies, principles, and techniques.
• Excellent interpersonal, written, and communication skills.

Preferred Qualifications & Extras

• Current government security clearance (SC/DV) or willingness to acquire one.
• Incident management certifications such as CCIM or GCIH.
• Degree or MSc in Information Security, IT or relevant STEM fields.

Work Arrangements & Locations

This is a full time permanent role based in London and Manchester with a flexible work option available across 20 UK offices including Birmingham. Flexibility in office work, remote work, and part-time arrangements are available on discussion.

Key skills/competency

Cyber security, incident management, digital forensics, risk consulting, threat landscape, client liaison, technical expertise, security certifications, communication, consulting.