Team Lead Incident Management (Hybrid set up)

Join a team of security and technology professionals and help Swiss Re to fulfil its mission in making the world more resilient. As the Security Awareness Process Manager, you'll support the development of Swiss Re's information security & risk awareness programme, establish a communication plan to get across security awareness topics and coordinate proprietary trainings to educate employees on the importance of staying safe in the digital world. What's more, you'll be working in a hybrid setup, perfectly balancing work from home and the office premises.  

About the team 

Group Security & Technology Platforms (GSTP) brings together security, technology platforms and operational resilience to provide secure, reliable and scalable foundations for Swiss Re's business. The function ensures that security, resilience and engineering quality are embedded by design into how technology is built, operated and evolved across the organisation.  

As part of the Security Team, Cyber Incident Management coordinates the preparation for, response to and recovery from cyber incidents, minimising business impact and protecting Swiss Re's operations, clients, and reputation. We're looking for an experienced, composed and collaborative leader who can strengthen our incident response capability and lead teams through complex, high-pressure cyber situations. 

In your role, you will… 

• Lead the Cyber Incident Management team for Swiss Re 

• Develop and maintain a world-class cyber incident response capability, including plans, procedures and response playbooks 

• Manage technical and non-technical responses to major cyber-attacks, ensuring swift detection, containment, eradication and recovery 

• Mobilise Swiss Re resources and lead communications with stakeholders across all areas of the business and levels of seniority 

• Organise response teams and activities regionally and globally 

• Coordinate tabletop exercises and simulations to test and improve our response capabilities 

• Identify improvements, conduct retrospectives and drive continuous improvement across cyber incident response practices 

• Collaborate with cross-functional teams to enhance threat intelligence, cyber defence and organisational resilience 

• Ensure thorough documentation of cyber incident response and emergency management plans 

• Engage stakeholders and provide executive-level briefings on cybersecurity incidents, trends and recommendations 

• Conduct post-incident reviews to identify root causes and support the creation of incident reports 

• Provide feedback to the Threat Intelligence team for appropriate analysis and dissemination 

• Lead, inspire and develop the Incident Management team by establishing an environment that enables autonomy, mastery and continuous learning 

• Be available to respond outside normal business hours as needed, including participation in on-call arrangements for urgent matters 

• Contribute to Swiss Re's healthy and transparent risk culture where everyone engages in continuous risk accountability activities 

Your qualifications 

Nobody is perfect and meets 100% of our requirements. If you, however, meet some of the criteria below and are curious about the world of teaching employees about cyber security's importance and raising their awareness, we'll be more than happy to meet you!  

• What we need from you:

• Passion, drive and a belief in the value of strong cyber incident response as an enabler of business resilience 

• Experience leading cyber incident response, security operations or comparable technology teams in complex, international environments 

• The ability to communicate, collaborate and influence across a broad range of stakeholders, including senior management, technology teams, business functions, Legal, Compliance, Communications and Risk Management 

• A track record of successful delivery in incident response, emergency management, cybersecurity operations, threat intelligence or related security disciplines 

• Demonstrated expertise and a high level of motivation as a leader for an international team with the ability to work in a hybrid setting 

• Hands-on understanding of incident response lifecycle activities, including preparation, detection, containment, eradication, recovery and lessons learnt 

• Strong judgement, structured decision-making and composure under pressure during high-impact cyber events 

• Being fluent in data and analytics and knowledgeable of using data to drive operational improvement 

• A high level of integrity, result-oriented approach and commitment to continuous improvement 

• Strong communication, influencing and collaboration skills 

• Excellent command of both written and spoken English 

• Nice-to-have:

• Experience with cyber crisis management, tabletop exercises, executive briefings or regulatory-driven incident reporting 

• Knowledge of threat intelligence, Cyber Defence Operations, resilience frameworks or major incident management processes 

• Relevant security, incident response or crisis management certifications would be an advantage 

For Spain the base salary range for this position is between EUR 60,000 and EUR 100,000 (for a full-time role). The specific salary offered considers:

• the requirements, scope, complexity and responsibilities of the role,
• the applicant’s own profile including education/qualifications, expertise, specialisation, skills and experience.

In the situation where you do not meet all the requirements or you significantly exceed these, the offered salary may be below or above the advertised range.

In addition to your base salary, you may be eligible for additional rewards and benefits including an attractive performance-based bonus.