Incident Response Manager

Our client is a top-tier cyber consulting and incident response company, working with organizations worldwide to proactively build their cyber resilience, and to respond to and defeat cyber attacks. Sygnia is a trusted advisor of IT and security teams, senior managements, and boards of top organizations, including Fortune 100 companies. Sygnia is looking for an experienced Incident Response Manager (IRM) to lead incident response services for clients across APAC. This is a senior management role within Sygnia’s Incident Response department and an integral part of the company’s global IR service delivery organisation.

The role combines technical leadership, crisis management, client engagement, and cross-functional project leadership.

Main Responsibilities

• Lead incident response and threat-hunting engagements involving large-scale and sophisticated cyberattacks, with the objective of containing, mitigating, and defeating real-world threats
• Support the investigation strategy and technical direction of engagements, ensuring that evidence collection, analysis, containment, and remediation activities address the client’s most critical risks and business priorities
• Lead dynamic, cross-functional teams of cybersecurity researchers, forensic experts, and other specialists assembled according to the specific needs of each engagement. Team members do not report directly to the IR Manager outside the scope of the project
• Critically assess technical findings, challenge assumptions, identify investigative gaps, and guide the team toward clear and defensible conclusions
• Maintain clear, concise, and timely internal communication, providing regular updates to technical, financial, legal, business, and executive stakeholders within the company
• Lead client-facing communication throughout investigations and work closely with clients’ IT, security, legal, and executive teams, as well as relevant external stakeholders
• Serve as a trusted advisor to clients during high-pressure and business-critical situations
• Collaborate with Sygnia’s global teams to ensure consistent, high-quality incident response delivery across regions
• Strengthen client relationships, identify relevant business opportunities, and support the introduction of additional Sygnia services
• Contribute to Sygnia’s broader strategic objectives through professional publications, thought leadership, marketing initiatives, and business development activities
• Design, develop, and continuously improve internal incident response methodologies, processes, and capabilities

Main Requirements

• At least 5 years of relevant leadership experience in incident response, cybersecurity consulting, crisis management, or a comparable technical environment
• Demonstrated ability to lead technically complex investigations, evaluate evidence, guide specialists, make risk-based decisions, and communicate defensible conclusions.
• Proven ability to lead diverse groups of specialists who do not report directly to the role while maintaining alignment, accountability, and effective execution.
• A decisive, intellectually sharp, and positive leader with a strong commitment to excellence.
• A calm and thoughtful leadership style, with the ability to make sound decisions in highly dynamic and fast-paced environments.
• Strong crisis-management capabilities, including the ability to objectively assess situations, manage complex stakeholder relationships, and continuously evaluate actions and priorities.
• Exceptional written, verbal, and presentation skills in English, with the ability to explain complex technical matters clearly and confidently to technical professionals and executive leadership. Additional languages are an advantage.
• Strong technical understanding of advanced cyber threats, attack vectors, adversary techniques, exploitation methods, and incident response methodologies.
• Ability to assess technical findings, identify gaps or unsupported assumptions, and translate evidence into appropriate investigative and response decisions.
• Strong knowledge of network fundamentals, common internet protocols, operating systems, and security controls.
• Familiarity with the tools and techniques used in security-event analysis, incident response, digital forensics, malware analysis, and broader security operations.
• Ability to work in a project-based environment involving urgent and unplanned engagements, including availability outside regular working hours and on weekends when required.
• Willingness to travel internationally as needed.
• Previous experience in strategy or cybersecurity consulting is an advantage.
• An academic degree in a technological or scientific discipline is an advantage.

We regret that only shortlisted candidates will be notified.

EA License No.: 08C3209 Registration No.: R1101742