Incident Response Lead

Incident Response Lead in Glasgow, Lanarkshire | Morson Edge Find a job Post a job Sign up Tired of searching? Let’s find you the right jobs faster Get Started Search These jobs were popular with other job seekers OT Cyber Resilience Lead Diageo Edinburgh, Midlothian 3 days ago Senior Infrastructure Engineer Scottish Public Pensions Agency (SPPA) Galashiels From £49,401 to £59,152 per annum 5 days ago Platforms, Networking & Cloud Lead Morson Edge Edinburgh, Midlothian £50k - 60k per year + None 1 week ago Security Engineer Mac Recruit Group Glasgow (G1) Up to £60,000 per annum 1 week ago Lead Cyber Security Advisor SUMMER-BROWNING ASSOCIATES LIMITED Glasgow (G74), G74 Up to £0.00 per day + Competitive Inside IR35 Day Rate 6 days ago Senior Project Manager Teleperformance Glasgow, Lanarkshire, G2 8AH 4 days ago IT Team Leader KAG Recruitment Consultancy Ltd Stirling (FK9) Up to £50,000 per annum 3 weeks ago Service Desk Analyst - Telephony, Avaya Hays Glasgow (G1), G1 £250.0 - £300.0 per day + £market rate (Inside IR35) 1 week ago Senior Cyber Security Analyst VIQU IT Recruitment Glasgow (G2), G2 6BQ Market related 6 days ago IT Infrastructure Team Lead Cathcart Technology Glasgow (G1), G1 Negotiable 1 week ago Incident Response Lead Morson Edge Glasgow, Lanarkshire Temporary Contract; Hybrid Published: 1 week ago £400 - 550 per year + None Apply Save Incident Response Lead Morson Edge Apply Incident Response Lead Scottish Power HQ, Glasgow Flexible & Hybrid working pattern Negotiable rate, Inside IR35, PAYE and UMB options available Help us create a better future, quicker SP Energy Networks (SPEN) has kicked off an ambitious security transformation programme to transparently reduce risk, achieve compliance with NIS regulations and deliver a cyber resilient business and the Incident Response Lead is essential in achieving our goals. This role will be integrated into an active and ambitious global cyber security function, contributing to SPEN's cyber security purpose of delivering cyber resilient OT and IT, to enable a safe and reliable electricity supply to customers. What you'll be doing You will play a central role in strengthening SPEN's incident response capability by developing, maintaining, and continuously improving cyber security playbooks, procedures, and associated documentation. You'll work closely with incident responders, detection engineers, and wider cyber teams to ensure processes are clear, repeatable, and aligned with best practice. You'll support the full incident lifecycle - from preparation through to post incident review - ensuring lessons learned are captured, documented, and fed into future improvements. As part of this, you will contribute to the maturity of SPEN's cyber response framework, ensuring playbooks are operationally effective, compliant with NIS regulations, and tailored to our evolving OT and IT environments. You will also be responsible for developing and delivering an incident response exercise plan covering a range of scenarios designed to test team readiness, validate playbooks, and ensure operational effectiveness. These exercises may include tabletop scenarios, technical simulations, cross team coordination drills, and lessons learned reviews that contribute directly to capability uplift. Building strong working relationships across the business will be key. You'll engage with operational, engineering, legal, risk, communications, and technology stakeholders to understand their requirements, coordinate incident response activities when required, and ensure that documentation and processes reflect real world operational needs. You will also have the opportunity to help shape the wider strategy of the Incident Response function - identifying capability gaps, contributing to team roadmaps, supporting cross industry collaboration, and driving continual service improvement within SPEN's cyber resilience programme. What you'll bring - Experience developing, maintaining, or executing incident response playbooks, runbooks, or procedures within a cyber security environment. - Strong documentation skills - with the ability to translate complex technical activities into clear, structured, and usable operational guidance. - Ability to plan, deliver, and evaluate incident response exercises - such as tabletop scenarios, simulation based drills, or cross team coordination activities - with a focus on validating playbooks and improving operational readiness. - Demonstrable experience building effective relationships with technical and non technical stakeholders, with the ability to collaborate, influence, and communicate clearly during both day to day operations and during security incidents. - A good understanding of the incident response lifecycle, common attack techniques (MITRE ATT&CK), and how incident response processes integrate with threat detection, monitoring, and wider security operations. Apply Morson Edge HR Services, Recruitment & Selection 22 Jobs Similar Incident Response Lead Jobs Popular with Other Job Seekers OT Cyber Resilience Lead Diageo Edinburgh, Midlothian 3 days ago Senior Infrastructure Engineer Scottish Public Pensions Agency (SPPA) Galashiels From £49,401 to £59,152 per annum 5 days ago Platforms, Networking & Cloud Lead Morson Edge Edinburgh, Midlothian £50k - 60k per year + None 1 week ago Security Engineer Mac Recruit Group Glasgow (G1) Up to £60,000 per annum 1 week ago Lead Cyber Security Advisor SUMMER-BROWNING ASSOCIATES LIMITED Glasgow (G74), G74 Up to £0.00 per day + Competitive Inside IR35 Day Rate 6 days ago Senior Project Manager Teleperformance Glasgow, Lanarkshire, G2 8AH 4 days ago IT Team Leader KAG Recruitment Consultancy Ltd Stirling (FK9) Up to £50,000 per annum 3 weeks ago Service Desk Analyst - Telephony, Avaya Hays Glasgow (G1), G1 £250.0 - £300.0 per day + £market rate (Inside IR35) 1 week ago Senior Cyber Security Analyst VIQU IT Recruitment Glasgow (G2), G2 6BQ Market related 6 days ago IT Infrastructure Team Lead Cathcart Technology Glasgow (G1), G1 Negotiable 1 week ago Incident Response Lead jobs Incident Response Lead jobs in Glasgow IT jobs IT jobs in Glasgow Security jobs Security jobs in Glasgow Jobs in Glasgow Programme Lead jobs Helpdesk Advisor jobs Security Guard Supervisor jobs QA Lead jobs Close Protection Officer jobs Security Operations Lead jobs Technical Lead jobs Information Security Lead jobs Improvement Lead jobs Security Supervisor jobs Safeguarding Lead jobs Incident Response jobs Service Desk Team Leader jobs Major Incident Manager jobs Safeguarding Officer jobs Incident Management jobs Get hired. Find success. Get started Totaljobs About us Careers at Totaljobs Press Partners Privacy policy Terms and conditions Cookies Legal and compliance Accessibility Jobseekers Salary Planner Jobseeker help centre Career advice Recruiters Post job ads Recruiting news Courses Contact us - recruiters Recruit internationally Download App store Play store The Stepstone Group UK Ltd © 2026 We use cookies We use cookies to operate our website, measure how people use our services to help us improve them, enrich usage profiles and personalise the content displayed to you. We also share information about your use of our site with our social media, advertising, and analytics partners, who may combine it with other information, to show you relevant ads on other websites, and to measure the performance of our advertising. Some cookies are essential for the operation of our website. If you would prefer us not to use the non-essential cookies, click “Just necessary”, but please be aware that this may impact your experience of our site and the services we are able to offer. Click “Accept” if you’re happy for us to place these cookies. You can change your mind at any time. Store and / or access information on a device Cookies, device identifiers, or other information can be stored or accessed on your device for the purposes presented to you. Personalised ads and content, ad and content measurement, audience insights and product development Ads and content can be personalised based on a profile. More data can be added to better personalise ads and content. The performance of ads and content can be measured. Insights about audiences who have viewed the ads and content can be extracted. Data can be used to build or improve user experience, systems and software. Display third-party content (social networks, videos) Content from social networks and embedded content from third-party providers can be displayed. Identifiers derived from authentications If an identifier is created based on authentication data, such as contact details associated with online accounts you have set up on websites or apps (e.g. email address, phone number) or customer identifiers (e.g. an identifier provided by your telecommunications provider), then this identifier can be used to recognize you across websites, apps and devices if you are logged in with the same contact details. Just Necessary Accept All Cookie Settings You can also exercise your right to object to data processing based on legitimate interests under “Privacy Policy”. Privacy Policy Cookie policy