Iberdrola

12 hours ago

Cyber Incident Operations Lead

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 12 hours agoStatus: Live

Job Summary

Lead cyber incident operations across complex IT and operational technology (OT) environments, taking charge of the full incident lifecycle from readiness and threat detection through investigation, containment, eradication, recovery, and post-incident improvements. Partner with the Incident Response Manager to ensure threat intelligence informs detection engineering and response decisions. Coordinate multidisciplinary teams across IT, OT, managed security providers, vendors, and stakeholders while maintaining operational readiness through exercises and scenario planning.

Location: Glasgow

Workplace: Hybrid

Employment Type: Full time

Job Function: Business Operations

Seniority: Sr. Manager level

Key Responsibilities

•Lead the full cyber incident lifecycle, including readiness, threat detection, investigation, containment, eradication, recovery, and post-incident improvement.
•Ensure threat intelligence informs detection capabilities and response decisions, and translate lessons learned into stronger controls and enhanced playbooks.
•Coordinate multidisciplinary teams across IT, OT, managed security providers, vendors, and corporate stakeholders during high-impact incidents.
•Maintain operational readiness through regular exercises, scenario planning, and continuous improvement of incident response processes.
•Act as deputy to the Incident Response Manager when required, supporting governance, executive reporting, crisis communications, and cyber strategy.

Pay and Benefits

Salary: GBP 59,000 - 74,000 annually

Perks:PensionHealth InsuranceAnnual LeaveLife AssuranceRemote Work

Key Requirements

•Significant experience in cyber incident response, security operations, or digital forensics, including leading multidisciplinary teams through major incidents.
•Experience in regulated or critical infrastructure environments and understanding challenges for both OT and IT systems.
•Knowledge of threat-led detection engineering, adversary frameworks such as MITRE ATT&CK and ICS ATT&CK, and cyber threat modelling methodologies.
•Ability to provide decision-making support to senior stakeholders by translating technical incidents into business and regulatory impact.
•Ability to achieve SC Clearance; professional certifications such as GCIH, GCFA, GNFA, CREST Incident Manager, ICS515, or ICS418 are desirable.

Experience:Cyber incident responseSecurity operationsDigital forensicsOTITCritical infrastructure

Skills:LeadershipCross-functional coordinationStakeholder managementCrisis decision-makingContinuous improvement

Certifications:GCIHGCFAGNFACREST Incident ManagerICS515ICS418

Languages:English

Tech Stack:MITRE ATT&CKICS ATT&CKIEC 62443Detection engineering

Eligibility

Security Clearance:NSV SCSC Clearance

Company Brief

Iberdrola

Iberdrola is a multinational electric utility focused on generation, distribution and commercialization of electricity, with significant investments in renewable energy, grid modernization and international power markets serving residential, commercial and industrial customers.

Industry: Utilities

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Bilbao, Spain

Founded: 1992

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Iberdrola

12 hours ago

Cyber Incident Operations Lead

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 12 hours agoStatus: Live

Job Summary

Location: Glasgow

Workplace: Hybrid

Employment Type: Full time

Job Function: Business Operations

Seniority: Sr. Manager level

Key Responsibilities

•Lead the full cyber incident lifecycle, including readiness, threat detection, investigation, containment, eradication, recovery, and post-incident improvement.
•Ensure threat intelligence informs detection capabilities and response decisions, and translate lessons learned into stronger controls and enhanced playbooks.
•Coordinate multidisciplinary teams across IT, OT, managed security providers, vendors, and corporate stakeholders during high-impact incidents.
•Maintain operational readiness through regular exercises, scenario planning, and continuous improvement of incident response processes.
•Act as deputy to the Incident Response Manager when required, supporting governance, executive reporting, crisis communications, and cyber strategy.

Pay and Benefits

Salary: GBP 59,000 - 74,000 annually

Perks:PensionHealth InsuranceAnnual LeaveLife AssuranceRemote Work

Key Requirements

•Significant experience in cyber incident response, security operations, or digital forensics, including leading multidisciplinary teams through major incidents.
•Experience in regulated or critical infrastructure environments and understanding challenges for both OT and IT systems.
•Knowledge of threat-led detection engineering, adversary frameworks such as MITRE ATT&CK and ICS ATT&CK, and cyber threat modelling methodologies.
•Ability to provide decision-making support to senior stakeholders by translating technical incidents into business and regulatory impact.
•Ability to achieve SC Clearance; professional certifications such as GCIH, GCFA, GNFA, CREST Incident Manager, ICS515, or ICS418 are desirable.

Experience:Cyber incident responseSecurity operationsDigital forensicsOTITCritical infrastructure

Skills:LeadershipCross-functional coordinationStakeholder managementCrisis decision-makingContinuous improvement

Certifications:GCIHGCFAGNFACREST Incident ManagerICS515ICS418

Languages:English

Tech Stack:MITRE ATT&CKICS ATT&CKIEC 62443Detection engineering

Eligibility

Security Clearance:NSV SCSC Clearance

Company Brief

Iberdrola

Industry: Utilities

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Bilbao, Spain

Founded: 1992

Website LinkedIn