Location
Elgin Ave., London

Hours
Full Time, hybrid working with an expectation of 60% office attendance. Flexible working options available including occasional home working.

Salary
£87,305 per annum

About the Role
The Government Cyber Unit (GCU) is dedicated to protecting public services from cyber threats and enhancing digital resilience across government. As Head of Incident Management (Response), you will lead the cross-government response to significant cyber security and digital resilience incidents, driving resilience through exercising and lessons learned, and managing a high-performing joint team. This role reports to the Deputy Director for Government Cyber Operations and is based within the Government Cyber Coordination Centre (GC3), a joint initiative between the Department for Digital, Culture, Media and Sport (DCMS) and the National Cyber Security Centre (NCSC). You will work closely with stakeholders across government, including policy teams, accountability teams, and departmental IT and cyber security teams, to ensure coordinated and effective incident response.

Key responsibilities include:
- Leading operational response to critical cyber threats, vulnerabilities, and incidents
- Establishing and delivering a cross-government cyber and digital resilience exercising programme
- Advising ministers, senior officials, and cyber leadership on incident response
- Building and improving processes, technology, and governance structures for incident management
- Line managing lead analysts and supporting staff development
- Supporting out-of-hours on-call incident response rota with remuneration or flexible working arrangements

This is a pivotal role at a challenging time for cyber security, offering the opportunity to make a significant impact on national security and public service protection.

Experience
- Significant experience leading the response to cyber and/or digital resilience incidents within large, complex organisations or at a sectoral or national level
- Proven track record in building and embedding incident response capabilities, including planning, exercising, crisis simulation, post-incident reviews, and lessons management
- Strong stakeholder engagement and influencing skills with the ability to build trusted relationships and manage competing priorities
- Ability to provide clear, credible advice to senior decision makers, translating complex technical details for non-technical audiences
- Experience balancing strategic objectives, operational risks, and stakeholder requirements
- High personal resilience and ability to make effective decisions under ambiguity and rapidly changing circumstances

About you
You are a resilient and strategic leader with excellent communication and influencing skills. You thrive in complex environments and are motivated by the opportunity to protect national infrastructure and public services. You are committed to continuous improvement and fostering a supportive, inclusive team culture.

Qualifications
Developed Vetting (DV) clearance is required for this role. Candidates must be UK nationals and meet residency requirements. The role requires a high level of security clearance due to access to sensitive information. No specific academic qualifications are mandated, but relevant professional experience and demonstrated expertise in cyber incident management are essential.