Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Senior Manager, Incident Response role.

Rezi rewrites your resume against Grant Thornton Australia's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Senior Manager, Incident Response posting at Grant Thornton Australia — free, in seconds.

About the Role

We are seeking a commercially astute Senior Manager to lead our incident response capability in an AI-enabled threat world. This role involves coordinating responses to cyber incidents, minimizing business impact, and helping clients operate again. You will build a differentiated incident response service as part of a global network.

Responsibilities

Lead client incident response engagements end to end, from triage and containment through to eradication, recovery and post-incident review.
Act as incident lead and senior escalation point for major client incidents, coordinating response activity across client teams, legal counsel, insurers, managed security service providers and other third parties.
Work alongside client executives and crisis management teams, aligning incident response with business continuity and executive decision-making to minimise impact and speed up recovery.
Lead and mentor a team of incident response specialists across digital forensics, threat intelligence and threat hunting, with responsibility for their development and career progression.
Manage investigations, making sure the right people are assigned and every action is accurately documented in line with established processes, standards and frameworks.
Prepare and review technical reports and executive summaries, translating what happened, why it matters and what to do next into terms boards and executives can act on.
Use threat intelligence and proactive threat hunting to help clients prepare for, prevent and identify the threats targeting their organisation.
Help clients get ready before an incident happens, through readiness assessments, incident response plans, playbooks, escalation processes and tabletop exercises.
Shape how automation and AI-enabled workflows strengthen our detection and response capability, while keeping the right human oversight, governance and accountability in place.
Build and hold client relationships, identify follow-on opportunities and contribute to proposals, incident response retainers and sustainable service delivery.
Work as part of a global network of incident response professionals, drawing on shared capability while building a locally relevant and differentiated service.
Contribute to how the practice develops, including playbooks, procedures, technology partner engagement and bringing new people through.
Take part in an on-call roster to support clients in an emergency.

Requirements

Significant experience leading cyber security incident response, whether in a consulting or incident response provider, an in-house CSIRT, or a security operations centre.
Hands-on depth across incident management, digital forensics, threat intelligence and threat hunting.
Experience with the platforms and tooling behind modern detection and response.
A strong understanding of incident response frameworks and best practice, and of Australian regulatory and breach notification obligations.
A track record of leading and developing teams, and a genuine interest in doing it.
Experience working with clients or stakeholders outside your own organisation, including executives, legal counsel, insurers and managed security service providers.
The ability to stay calm under pressure and lead communications during a crisis, and to explain why cyber matters to people who don’t work in it.
Strong writing skills, with reports that stand up to executive, legal and regulatory scrutiny.
Commercial awareness, including how incident response engagements and retainers are scoped, priced and delivered sustainably.
Comfort working as part of a team. This role suits someone who builds with others rather than around them.
Australian citizenship or permanent residency.
Willingness to travel for client work and be part of an on-call roster.
Experience working with cyber insurers or alongside legal counsel on breach response engagements.
Experience designing and running cyber incident tabletop exercises or executive-level cyber crisis simulations.

Skills

Incident management
Digital forensics
Threat intelligence
Threat hunting
Cyber security
AI-enabled workflows
Automation
Communication
Writing
Client relationship management
Team leadership
GCIH
GCFA
GCFE
GREM
CISSP

Location

Australia

Work Type

Full-time
Permanent
Hybrid

Experience Level

Senior Manager

Benefits

Excellent career progression
Professional development support

About the Company

Grant Thornton Australia is one of Australia’s leading professional services firms, providing audit, tax, and advisory services to a diverse range of clients.
Our culture is underpinned by a commitment to our clients, people and communities, and our promise to ‘Reach for Remarkable’ by providing proven expertise, principled execution, and personalised experience.
In Australia we're proud to support the careers of more than 1,500 remarkable people. Backed by six Australian offices and a global network spanning more than 150 markets, we offer the scale, connections and opportunities to help you shape your future, wherever it takes you.

Equal Opportunity

We are committed to ensuring our recruitment process is inclusive and accessible for anyone who wishes to apply, and we warmly encourage applications from individuals from diverse backgrounds including Aboriginal and/or Torres Strait Islanders, those in the LGBTQI+ community and individuals who identify as having disability or are neurodivergent.
Should you have questions or require any adaptations or additional support for your individual circumstances so you may perform at your best during the application or recruitment process please contact our Talent Acquisition team at gttalentscouts@au.gt.com