Incident Response Manager
SGS · Centurion, GP, South Africa
What the posting says
Each fact was read from this posting and checked:Statedin the posting, quotedConflictsposted two ways, both shownNot mentionedwe looked; it is not there
- Employment typeStated
- Full time
Not mentioned in this posting
We read the whole posting. These are not in it. Not a no: ask the recruiter, in your own words.
- PayNot mentioned
- The posting does not say
- Work arrangementNot mentioned
- The posting does not say
- ShiftNot mentioned
- The posting does not say
- ExperienceNot mentioned
- The posting does not say
- EducationNot mentioned
- The posting does not say
- Visa sponsorshipNot mentioned
- The posting does not say
Requirements, each with its sentence from the posting
These are the employer’s words. The index does not judge whether you meet them.
- No requirement has been itemized for this posting yet. The employer’s words are in the full posting below.
Read the full posting as the employer wrote it
Company Description
SGS is the world’s leading inspection, verification, testing and certification company. SGS is recognized as the global benchmark for quality and integrity. With more than 97,000 employees, SGS operates a network of over 2,600 offices and laboratories around the world.
Job Description
The Incident Response Manager is responsible for leading the cybersecurity incident response program for clients. This role ensures rapid detection, containment, eradication, and recovery from security incidents while minimizing business impact. The manager will coordinate across IT, security, legal, and executive teams, and act as the primary point of contact during cyber crises.
Key Responsibilities
Incident Response Leadership
- Lead the response to cybersecurity incidents, including triage, containment, eradication, and recovery.
- Coordinate communication between technical teams, executives, and external stakeholders.
Monitoring & Detection
- Oversee security monitoring tools (SIEM, IDS/IPS, endpoint detection).
- Ensure timely detection of suspicious activity and potential breaches.
Investigation & Forensics
- Direct forensic analysis of compromised systems.
- Preserve evidence for legal or regulatory purposes.
- Document root cause analysis and lessons learned.
Collaboration & Communication
- Work closely with IT, legal, compliance, and executive leadership during incidents.
- Provide clear, concise updates to stakeholders.
- Liaise with external partners such as law enforcement, regulators, and vendors.
Training & Preparedness
- Conduct incident response drills and tabletop exercises.
- Train staff on security awareness and escalation procedures.
- Continuously improve incident response capabilities.
Policy & Compliance
- Ensure compliance with data protection laws (e.g., POPIA in South Africa, GDPR if applicable).
- Maintain alignment with industry standards (ISO 27001, NIST Cybersecurity Framework).
Qualifications
- Bachelor's degree in Computer Science and Informatics
- Honours degree in Computer Science (Specialising in Cybersecurity)
- GIAC Certified Forensic Analyst (GCFA)
- 3+ years of experience in incident response, SOC operations, or cybersecurity management.
- Strong knowledge of network security, malware analysis, and digital forensics.
- Familiarity with regulatory frameworks (POPIA, GDPR, PCI DSS).
- Excellent leadership, communication, and crisis management skills.
Additional Information
Core Competencies
- Analytical thinking and problem-solving under pressure.
- Ability to manage multiple incidents simultaneously.
- Strong leadership and team coordination skills.
- Clear communication with both technical and non-technical audiences
The posting text is reproduced as the employer wrote it; the index adds nothing to it.