GSOC (Global Security Operations Center) Incident Response Manager

3 weeks ago


England, UK, United Kingdom KPMG Full time

About KPMG International


Through helping other organizations mitigate risks and grasp opportunities, we can drive positive, sustainable change for clients, our people and society at large. KPMG firms operate in 143 countries and territories, and in FY22, collectively employed more than 265,000 partners and people, serving the needs of business, governments, public-sector agencies, not-for-profits and through KPMG firms' audit and assurance practices, the capital markets. KPMG is committed to quality and service excellence in all that we do, bringing our best to clients and earning the public's trust through our actions and behaviors both professionally and personally.


We lead with a commitment to quality and integrity across the KPMG global organization, bringing a passion for client success and a purpose to serve and improve the communities in which KPMG firms operate. In a world where rapid change and unprecedented disruption are the new normal, we inspire confidence and empower change in all we do."


About the team


GISG (Global Information Security Group) is one of five domains within KPMG’s Global Technology & Knowledge group. GISG provides the information protection and technology infrastructure that secures KPMG’s technology environment and connects its network of member firms. GISG works with the other GT&K domains to ensure that appropriate security controls are in place for KPMG technology solutions.


Role summary


  • Provide Bridge between GISG Operational teams and ITS Global Major Incident Management Process
  • Coordinate Security Incident management activities across Regions • Provide Member Firms with Incident Response advice and support through the regional model
  • Provide guidance to GSOC Operational Teams on advice given to MF when escalating incidents
  • Provide Regionally aligned situational awareness to MF's and GSOC Operational Teams
  • Define, set up, and maintain repeatable Teams War Room structure
  • Define, set up, and maintain communication structure and templates for the three below high level incident types. Assist in coordination with GCISO to link into board level and regulatory comms requirements
  • Give Service Management the Security context of any Security Incident promoted to Major Incidents
  • Assist in the delivery of Cyber War games and purple teaming activities
  • Initiate US Advisory IR assistance requests
  • Coordinate US Advisory IR activities when necessary


Key accountabilities


  • Provide Security Incident Management Framework and coverage between GISG and the ITS Global Service Management Major incident management process
  • Define and maintain a collaborative workspace structure for Security incident management activities, to enable near real time exchange of incident related information.
  • Oversee the establishment, and provide ongoing management, of a Regional Security incident management model. The model should be based on Security Incident management/Incident response staff in each region
  • Provide Incident response advice to all customers based on existing and expected Threat scenarios
  • Provide feedback to GSOC, ISS and GISG management on prevalent threats encountered by the regional Teams
  • Act as a coordination point for Cyber War Games and Purple team activities
  • Act as a coordination point for Incident Response engagements with US Advisory


Experience & knowledge


  • Experience of security incident response in a large, distributed organisation
  • Experience working in, or alongside, Security Operations Centres in a large, distributed organisation
  • Experience working across multi-disciplinary teams in relation to security incident management activities
  • Demonstrate experience dealing with complex security related incidents
  • Experience working in a hybrid legacy and cloud environment


Technical skills, abilities & qualifications


  • Bachelor’s degree in a related field (e.g. Computer Sciences, Computer Engineering, Information Technology and Security) or equivalent work experience
  • Significant experience in ITIL based Incident management activities • ITIL certification or equivalent experience
  • GCIH certification or equivalent certification or experience
  • Strong communication, reporting and documentation skills, proven ability to discuss with both business and technology management.


Intelligent Working


At KPMG International, we are supportive of helping you to achieve a balance between your home and work demands. We are happy to discuss individual requirements and our range of flexible working arrangements could be of interest. Please ask to find out more.


KPMG International's commitment to inclusion & diversity


At KPMG International, we recognise that we need inclusion and diversity to be successful. We want to attract, retain and develop diverse talent at all levels. This means recruiting from the widest pool of talent across our network and beyond, removing barriers that can prevent our people from reaching their full potential, and fostering a fully inclusive environment which empowers everyone to bring their whole selves to work.


Applying with a disability


KPMG International is proud to be an inclusive place to work and we are committed to ensuring that you are treated fairly throughout our recruitment process. Should you be successful after the initial application stage, please discuss any reasonable adjustments that you may require with your recruitment contact.



  • England,, UK, United Kingdom 1Tech Staffing Limited Full time

    SOC AnalystRemoteUp to £35,000Nights - Shift PatternsEntry Level to Mid-LevelAre you passionate about cybersecurity and have some experience as a Security Operations Center (SOC) Analyst/in a similar role? We are seeking enthusiastic individuals to join our clients team in an SOC Analyst role.Responsibilities:Monitor security events and alerts in real-time...


  • England,, UK, United Kingdom 1Tech Staffing Limited Full time

    SOC AnalystRemoteUp to £35,000Nights - Shift PatternsEntry Level to Mid-LevelAre you passionate about cybersecurity and have some experience as a Security Operations Center (SOC) Analyst/in a similar role? We are seeking enthusiastic individuals to join our clients team in an SOC Analyst role.Responsibilities:Monitor security events and alerts in real-time...


  • England,, UK, United Kingdom La Fosse Full time

    Hi All,I'm working with a global business looking for an Incident Response Lead who has a wide breath of experience working proactively on incidents and confident in collaborating with teams across the business.You will be a fit if you have experience with:Developing playbooks/runbooksA variety of blue-team activitiesWorking collaboratively with the...


  • England,, UK, United Kingdom La Fosse Full time

    Hi All,I'm working with a global business looking for an Incident Response Lead who has a wide breath of experience working proactively on incidents and confident in collaborating with teams across the business.You will be a fit if you have experience with:Developing playbooks/runbooksA variety of blue-team activitiesWorking collaboratively with the...


  • England,, UK, United Kingdom Pen Test Partners Full time

    Pen Test Partners works with clients globally providing cyber security consultancy and testing services. We work with the most cutting-edge industries, including Automotive, Aerospace, and Maritime.With over 140 employees across pen testing, consultancy, digital forensics, sales and support functions, we pride ourselves in attracting the right people and...


  • England,, UK, United Kingdom TRIA Full time

    Security Operations ManagerUp to £60,000 + 5k cash car allowanceHybrid – 2 days per week at either the London, Weymouth, or Newcastle officesWe are representing a leading B2C retailer who are in the process of modernising their technology estate, with significant investment in IT.As the Security Operations Manager, you will report to the Head of...


  • England,, UK, United Kingdom Banner Lane Full time

    We are seeking a highly skilled Global Security Controller to oversee the security operations for our client, a prominent manufacturing company with sites in the UK and US. The successful candidate will be responsible for securing the business by implementing company and client security requirements relating to personnel, facilities, information, and assets....


  • England,, UK, United Kingdom Banner Lane Full time

    We are seeking a highly skilled Global Security Controller to oversee the security operations for our client, a prominent manufacturing company with sites in the UK and US. The successful candidate will be responsible for securing the business by implementing company and client security requirements relating to personnel, facilities, information, and assets....


  • England,, UK, United Kingdom Iron Mountain Full time

    At Iron Mountain we know that work, when done well, makes a positive impact for our customers, our employees, and our planet. That’s why we need smart, committed people to join us. Whether you’re looking to start your career or make a change, talk to us and see how you can elevate the power of your work at Iron Mountain.We provide expert, sustainable...


  • England,, UK, United Kingdom Iceberg Cyber Security Full time

    I’m recruiting for 7 security Engineers to work for a global cyber security and defense company. With offices nation wide they have the ability for the 7 positions to be sent to any of these.The hiring managers for these roles believes in up skilling and believing in their staff, they are looking for cyber security risk professional to match this ambition....


  • England,, UK, United Kingdom Iceberg Cyber Security Full time

    I’m recruiting for 7 security Engineers to work for a global cyber security and defense company. With offices nation wide they have the ability for the 7 positions to be sent to any of these.The hiring managers for these roles believes in up skilling and believing in their staff, they are looking for cyber security risk professional to match this ambition....


  • England,, UK, United Kingdom CornerStone - Risk, Cyber & Security Full time

    CornerStone is a leading independent Security Risk Consultancy, and we are now looking for a Security Project Manager with a security background and 5 years of experience to join our established award-winning team. We are seeking an individual who is looking to share their extensive skills and knowledge to support the team in a UK-wide and Europe capacity....


  • England,, UK, United Kingdom Onclusive Full time

    As a Cyber Security Compliance Manager (Infosec and Data Privacy) you are the guardian of our organisation's data governance and compliance framework. Your expertise will ensure that our data handling practices are in strict adherence to global data protection regulations and standards. This role is critical in navigating the complexities of data privacy...


  • England,, UK, United Kingdom Onclusive Full time

    As a Cyber Security Compliance Manager (Infosec and Data Privacy) you are the guardian of our organisation's data governance and compliance framework. Your expertise will ensure that our data handling practices are in strict adherence to global data protection regulations and standards. This role is critical in navigating the complexities of data privacy...


  • England,, UK, United Kingdom GPA Global | Packaging Solutions Full time

    We are GPA Global team. We specialize in design, engineering, manufacturing, and distribution. We are at the forefront of creating bespoke packaging solutions, working with the world’s foremost brands across the globe. Conscious that we are part of an industry that is not inherently green, our objective is to take steps towards a more responsible version...


  • England,, UK, United Kingdom GPA Global | Packaging Solutions Full time

    We are GPA Global team. We specialize in design, engineering, manufacturing, and distribution. We are at the forefront of creating bespoke packaging solutions, working with the world’s foremost brands across the globe. Conscious that we are part of an industry that is not inherently green, our objective is to take steps towards a more responsible version...

  • Business Incident

    1 month ago


    England,, UK, United Kingdom Nationwide Building Society Part time

    At Nationwide, we’re known for putting our customers at the heart of everything we do. That’s no different when things go wrong. Emergency situations can happen at any time of day or night. When they do, you want to know that the team responding know what to do and how to do it as quickly and efficiently as possible. You want to know that they can keep a...

  • Business Incident

    3 weeks ago


    England,, UK, United Kingdom Nationwide Building Society Part time

    At Nationwide, we’re known for putting our customers at the heart of everything we do. That’s no different when things go wrong. Emergency situations can happen at any time of day or night. When they do, you want to know that the team responding know what to do and how to do it as quickly and efficiently as possible. You want to know that they can keep a...

  • SOC Manager

    21 hours ago


    England,, UK, United Kingdom Intaso Full time

    Title - SOC Manager Type - Full Time PermanentLocation - Remote, UKJob Description:As the SOC Manager, you will be responsible for overseeing the day-to-day operations of our clients Security Operations Centre. Your primary goal will be to ensure the security and integrity of their infrastructure by managing a team of skilled security analysts, coordinating...


  • England,, UK, United Kingdom Kingston Consulting Global Ltd Full time

    Our client is a highly successful global software organisation and we are recruiting a Head of IT Operations & Infrastructure to build and lead an international team at a time of positive transformation for the business. The position will be responsible for the strategic planning, management and execution of the company's IT infrastructure, including the...