incident manager

ZainTech

<div>The Incident Manager is responsible for overseeing the end-to-end management of incidents impacting cloud and infrastructure services, including AWS, Azure, and OCI environments.
This role ensures rapid restoration of services, effective communication with stakeholders, and continuous improvement through post-incident analysis.
Responsibilities:<ul><li>
Own and manage the full incident lifecycle from detection to closure.</li><li>
Act as the central command point during major (P1/P2) incidents.</li><li>
Coordinate cross-functional teams including cloud, network and Infrastructure teams as well as CSMs.</li><li>
Ensure timely incident triage, escalation, and resolution.</li><li>
Lead incident bridges, war rooms, and crisis calls.</li><li>
Ensure accurate and timely communication to stakeholders and leadership.</li><li>
Track incidents against SLAs and ensure compliance with operational targets.</li><li>
Drive root cause analysis (RCA) and post-incident reviews (PIRs).</li><li>
Identify recurring issues and recommend preventive and corrective actions.</li><li>
Maintain and improve incident management processes, playbooks, and runbooks.</li><li>
Ensure proper documentation and ticket updates in ITSM tools.</li><li>
Support audits, reporting, and service improvement initiatives.</li></ul> 

Requirements 
<ul><li>
5+ years of experience in IT operations, cloud, or infrastructure roles.</li><li>
2+ years of experience in Incident or Major Incident Management.</li><li>
ITIL Foundation or ITIL Intermediate (Incident Management) certification preferred.</li><li>
Cloud certifications (AWS, Azure, OCI) are a plus.</li><li>
Strong understanding of cloud platforms (AWS, Azure, OCI) and Private cloud operations.</li><li>
Familiarity with monitoring, alerting, and logging tools.</li><li>
Good understanding of infrastructure components (compute, storage, networking, IAM).</li><li>
Ability to assess technical impact and prioritize incidents effectively.</li><li>
Experience with ITSM tools (ServiceNow, Jira, Remedy, etc.).</li><li>
Strong knowledge of ITIL Incident and Major Incident Management processes.</li></ul></div>

Incident Manager

Systems Limited

<div>
 
 Lead the Security Incident Response function within the Cyber Defense Center, ensuring timely detection, investigation, containment, recovery, and reporting of cyber incidents. Act as the SME for incident management, drive response maturity, support regulatory compliance, and safeguard the bank&rsquo;s digital assets and reputation.
 
 
 
 
 
 
 Responsibilities
 
 
 <ul>
 <li>
 Lead end-to-end handling of major security incidents and crisis situations.
 </li>
 <li>
 Coordinate SOC, Technology, Business (LOD1), Compliance/Risk (LOD2), and Internal Audit (LOD3).
 </li>
 <li>
 Provide technical insights and updates to senior leadership and Crisis Management Team.
 </li>
 <li>
 Ensure effective investigation, root cause analysis, containment, recovery, and post-incident reporting.
 </li>
 <li>
 Own and enhance the Security Incident Response framework aligned with regulatory and business requirements.
 </li>
 <li>
 Develop and maintain policies, playbooks, and procedures based on standards such as NIST 800-61, ISO 27035, PCI, CERT.
 </li>
 <li>
 Define, track, and report KPIs/KRIs for incident response performance.
 </li>
 <li>
 Confirm adequacy of controls against internal policies and regulatory expectations.
 </li>
 <li>
 Conduct post-incident reviews and implement lessons learned.
 </li>
 <li>
 Drive automation initiatives across SIEM/SOAR platforms to improve response efficiency.
 </li>
 <li>
 Review and approve SIEM/SOAR use cases and playbooks.
 </li>
 <li>
 Strengthen overall cyber resilience and SOC maturity.
 </li>
 <li>
 Interface with Head Office, Local CISOs, regulators, and supervisory bodies.
 </li>
 <li>
 Ensure compliance with cybersecurity standards and banking regulations (UAE/BFSI preferred).
 </li>
 <li>
 Provide training and mentorship to SOC and incident response teams.
 </li>
 <li>
 12+ years in Information Security, with 6&ndash;8+ years focused on Security Incident Response.
 </li>
 <li>
 Proven leadership experience within SOC / Cyber Defense Center.
 </li>
 <li>
 Experience in BFSI domain strongly preferred.
 </li>
 </ul>
 
 
 
 
 
 Requirements
 
 
 <ul>
 <li>
 Hands-on experience with SIEM/SOAR platforms (e.g., Microsoft Sentinel, ArcSight).
 </li>
 <li>
 Strong knowledge of SOC operations, threat monitoring, detection engineering, and response workflows.
 </li>
 <li>
 Deep understanding of incident response frameworks and regulatory compliance requirements.
 </li>
 <li>
 Experience with KPI reporting, governance, risk assessment, and control validation.
 </li>
 <li>
 Strong analytical and critical thinking abilities under pressure.
 </li>
 <li>
 Excellent stakeholder communication and crisis management skills.
 </li>
 <li>
 Ability to prioritize high-impact incidents and drive them to closure.
 </li>
 <li>
 Focus on automation, innovation, and measurable outcomes.
 </li>
 <li>
 Degree in Computer Science or related technical field.
 </li>
 <li>
 Relevant certifications preferred: CISSP, CISM, GCIH, CEH, FOR608 or equivalent.
 </li>
 </ul>
 
 
</div>

Incident Manager - Cyber Defense

Baylor Scott & White Health

<div>Job Summary
The Cybersecurity Incident Response Coordinator at Baylor Scott &amp; White Health is responsible for leading and coordinating the organization&rsquo;s response to cybersecurity incidents. This role ensures timely containment, recovery, and communication with key stakeholders, including Business Information Security Officers (BISOs), while keeping business units informed throughout the incident lifecycle. The coordinator drives continuous improvement through lessons learned, strategic planning, and compliance with regulatory requirements. The ideal candidate will have extensive experience in incident management, strong communication skills, and a deep understanding of cybersecurity frameworks such as NIST CSF.
Preferred Knowledge, Skills and Abilities<ul><li>
Experience in incident management, exceptional communication skills, and a good understanding of cybersecurity frameworks and processes</li><li>
Exceptional written and verbal communication skills, with the ability to clearly and concisely convey complex information to both technical and non-technical audiences</li><li>
3 -5 years of experience specifically in cybersecurity, with an emphasis on incident response and crisis management</li><li>
Familiarity with cyber incident response processes, including detection, analysis, containment, eradication, and recovery</li><li>
Experience with ITIL or a similar service management framework, particularly in relation to incident management and response</li><li>
Excellent organizational and time management skills, with the ability to prioritize and manage multiple incidents simultaneously</li><li>
Familiarity with relevant regulations and compliance requirements such as GDPR, HIPAA, or PCI-DSS</li></ul>
Preferred Certifications<ul><li>
Certified Information Systems Security Professional (CISSP) certification</li><li>
Certified Information Security Manager (CISM) certification</li><li>
CompTIA Advanced Security Practitioner (CASP+)</li></ul>
Minimum Qualifications<ul><li>
EDUCATION - Bachelor's or 4 years of work experience above the minimum qualification</li><li>
EXPERIENCE - 8 Years of Experience</li></ul></div>

Cybersecurity Incident Response Coordinator

Banner Health

<div>Department Name:
IT Service Operations
Work Shift:
Day
Job Category:
Information Technology
Estimated Pay Range:
$46.84 - $78.06 / hour, based on location, education, &amp; experience.
In accordance with State Pay Transparency Rules.
Banner Health was named to Fortune&rsquo;s Most Innovative Companies in America 2025 list for the third consecutive year and named to Newsweek's list of Most Trustworthy Companies in America for the second year in a row. We&rsquo;re proud to be recognized for our commitment to the latest health care advancements and excellent patient care.
The Banner Health Critical Response team leads the charge when our most critical IT services are disrupted&mdash;moving fast to restore stability, protect patient care, and support the teams who rely on technology every minute of the day.
As a Senior Major Incident Commander, you are the calm, decisive commander at the center of high-impact incidents&mdash;aligning technical teams and business partners, driving rapid restoration, and delivering clear, timely communication throughout. You will also help shape our Major Incident Management strategy, strengthen and mentor the broader incident practice, and partner with leadership to turn every event into measurable, ongoing improvement.
This role requires working variable shifts and responding to 24x7 critical alerts via mobile device or other connected platform. The schedule for this role is Monday-Friday, 6AM - 2:30PM AZ Time. This can be a remote position if you live in the following states ONLY: Al, AK, AR, FL, GA, ID, IN, IA, KS, KY, LA, MD,MI, MN, MS, MO, NH, NM, NY, NC, ND, OH, OK, OR, PA, SC, TN, TX, UT, VA, WA, WI AZ CA CO NE NV WY. No other states will be consider.
Your pay and benefits (Total Rewards) are important components of your Journey at Banner Health. Banner Health offers a variety of benefit plans to help you and your family. We provide health and financial security options, so you can focus on being the best at what you do and enjoying your life.
Within Banner Health Corporate, you will have the opportunity to apply your unique experience and expertise in support of a nationally-recognized healthcare leader. We offer stimulating and rewarding careers in a wide array of disciplines. Whether your background is in Human Resources, Finance, Information Technology, Legal, Managed Care Programs or Public Relations, you'll find many options for contributing to our award-winning patient care.
POSITION SUMMARY
This is a seasoned expert who provides senior-level leadership during the most complex and high-impact major incidents. This role operates with a high degree of autonomy, advising Incident Commanders, Major Incident Managers, and senior stakeholders to ensure effective coordination, decision support, and communication. Outside of active incidents, the role drives maturity of the Major Incident Management practice through advanced analysis, mentoring, and continuous improvement initiatives focused on reducing risk, improving response effectiveness, and increasing organizational resilience.
Working variable shifts and responding to 24x7 critical alerts on a mobile device or other connected platform for service disruptions is required for this role.
CORE FUNCTIONS
1. Serves as senior operational leader for major incident coordination. Mentors Coordinators and partners with Major Incident Commanders during the most critical and complex incidents.
2. Establishes standards for incident documentation, timelines, and communication quality. Leads quality assurance efforts across the incident lifecycle.
3. Defines and leads enterprise standards for outage notifications and status communications. Ensures consistency, transparency, and executive- and clinical-level alignment.
4. Leads enterprise-level monitoring and alerting strategy reviews. Champions proactive detection, automation, and response optimization.
5. Provides leadership in Problem Management integration by driving systemic RCA outcomes, validating corrective actions, and reducing organizational risk.
6. Leads the team in improving major incident response SLAs and KPIs through data-driven insights, process optimization, and cross-functional collaboration.
7. Owns the evolution of major incident playbooks, templates, escalation frameworks, and communication standards to ensure consistency and clinical alignment.
8. Maintains expert-level knowledge of enterprise technology platforms, security policies, major incident processes, stakeholders, and downtime procedures. Acts as a trusted advisor to leadership.
9. Provides final decision authority during the most complex or high-risk major incidents, including executive escalation, risk acceptance, service restoration prioritization, and coordination of enterprise response when patient care, safety, or organizational reputation may be impacted.
MINIMUM QUALIFICATIONS
Experience and education as normally obtained through an Associate&rsquo;s degree and 5+ years of relevant experience in IT operations, service desk, NOC, or incident management.
Recognized subject-matter expert in major incident response and operational resilience. Extensive experience leading the most complex, high-risk, enterprise-wide incidents.
Proven ability to influence senior leadership and guide decision-making during crises. Demonstrated success driving maturity, governance, and continuous improvement initiatives. Advanced analytical and strategic thinking skills.
Ability and willingness to work variable shifts and respond to 24x7 critical alerts via mobile device or other connected platforms for service disruptions.
PREFERRED QUALIFICATIONS
Bachelor&rsquo;s degree in Information Systems, Computer Science, Healthcare Informatics, Healthcare Administration, Business Administration, or a related field strongly preferred.
Advanced ITIL certifications or equivalent industry credentials.
Experience shaping enterprise incident management strategy or operating model.
Experience working in healthcare or other highly regulated, high-availability environments.
Experience leading organization-wide preparedness, resilience, or risk-reduction initiatives.
Additional related education and/or experience preferred.
EEO Statement:
EEO/Disabled/Veterans
Our organization supports a drug-free work environment.
Privacy Policy:
Privacy Policy</div>

Senior Major Incident Commander

Qiddiya Investment Company

<div>Qiddiya Investment Company is looking for a dedicated and skilled Manager - CCU Incident Management (DEL5) to be responsible for monitoring, triaging, and managing operational incidents across all Qiddiya city assets. This role ensures that all incidents are detected, escalated, and resolved in a timely and structured manner to minimize disruption to guest experience and city operations
Key Responsibilities<ul><li>
Monitor real-time incident feeds, alarms, and communications across the City Command Unit's integrated operations platform.</li><li>
Triage and classify incidents according to severity levels and escalation protocols, ensuring appropriate response activation.</li><li>
Coordinate multi-agency and cross-functional response efforts, liaising with Security, Fire &amp; Life Safety, Medical, Facilities, and asset operators.</li><li>
Maintain accurate, real-time incident logs and post-incident documentation to support reporting and continuous improvement.</li><li>
Support the development and refinement of Standard Operating Procedures (SOPs) for incident response workflows.</li><li>
Participate in simulation exercises, tabletop drills, and after-action reviews to strengthen organizational readiness.</li><li>
Ensure compliance with Qiddiya's operational readiness standards and regulatory requirements during incident response.</li></ul> 

Requirements 
<ul><li>
Bachelor&rsquo;s degree in Emergency Management, Risk Management, Business Administration, or a related field; a Master&rsquo;s degree is preferred.</li><li>
Minimum 5 years of experience in incident management, emergency operations, or command center environments within large-scale entertainment, hospitality, or urban operations settings.</li><li>
Demonstrated experience with integrated command and control systems, CCTV monitoring, and digital incident management platforms.</li><li>
Strong situational awareness, decision-making capability under pressure, and effective communication skills.</li><li>
Strong understanding of IT service management frameworks such as ITIL.</li><li>
Proven track record in managing critical incidents and leading incident response teams.</li><li>
Excellent analytical and problem-solving skills.</li><li>
Strong communication and interpersonal skills, with the ability to work collaboratively across teams.</li><li>
Relevant certifications (e.g., ITIL certification, Certified Information Systems Security Professional (CISSP), or similar) are preferred.</li></ul> 

Benefits 
Offering a comprehensive compensation and benefits package.</div>

Manager - CCU Incident Management (DEL5)

<div>The Senior Manager - CCU Incident Management serves as a frontline coordinator within the City Command Unit, responsible for monitoring, triaging, and managing operational incidents across all Qiddiya city assets. This role ensures that all incidents are detected, escalated, and resolved in a timely and structured manner to minimize disruption to guest experience and city operations
Key Responsibilities<ul><li>
Monitor real-time incident feeds, alarms, and communications across the City Command Unit's integrated operations platform.</li><li>
Triage and classify incidents according to severity levels and escalation protocols, ensuring appropriate response activation.</li><li>
Coordinate multi-agency and cross-functional response efforts, liaising with Security, Fire &amp; Life Safety, Medical, Facilities, and asset operators.</li><li>
Maintain accurate, real-time incident logs and post-incident documentation to support reporting and continuous improvement.</li><li>
Support the development and refinement of Standard Operating Procedures (SOPs) for incident response workflows.</li><li>
Participate in simulation exercises, tabletop drills, and after-action reviews to strengthen organizational readiness.</li><li>
Ensure compliance with Qiddiya's operational readiness standards and regulatory requirements during incident response.</li></ul> 

Requirements 
<ul><li>
Minimum 7 + years of experience in incident management, emergency operations, or command center environments within large-scale entertainment, hospitality, or urban operations settings.</li><li>
Demonstrated experience with integrated command and control systems, CCTV monitoring, and digital incident management platforms.</li><li>
Strong situational awareness, decision-making capability under pressure, and effective communication skills.</li><li>
Familiarity with ICS (Incident Command System) or equivalent frameworks.</li><li>
Relevant certifications in emergency management or incident command are desirable.</li></ul></div>

Senior Manager - CCU Incident Management (DEL 3)

<div>Department Name:
IT Service Operations
Work Shift:
Day
Job Category:
Information Technology
Estimated Pay Range:
$33.69 - $56.15 / hour, based on location, education, &amp; experience.
In accordance with State Pay Transparency Rules.
Banner Health was named to Fortune&rsquo;s Most Innovative Companies in America 2025 list for the third consecutive year and named to Newsweek's list of Most Trustworthy Companies in America for the second year in a row. We&rsquo;re proud to be recognized for our commitment to the latest health care advancements and excellent patient care.
The Banner Health Critical Response team steps in when our most critical IT services are disrupted&mdash;mobilizing quickly to restore stability, safeguard patient care, and support the teams who depend on technology every minute of the day.
As a Senior Major Incident Coordinator, you will be the operational engine behind our major incident response: monitoring for impact, keeping timelines and documentation crisp and accurate, ensuring process adherence, and helping teams stay aligned under pressure. When incidents are not active, you&rsquo;ll support operational readiness&mdash;so when the next high-severity event hits, we respond faster and smarter. You&rsquo;ll work under the guidance of the Major Incident Commanders. This role requires variable shifts plus responding to 24x7 critical alerts via mobile device or other connected platform The schedule for this role is Monday-Friday, 6AM - 2:30PM AZ Time. This can be a remote position if you live in the following states ONLY: Al, AK, AR, FL, GA, ID, IN, IA, KS, KY, LA, MD,MI, MN, MS, MO, NH, NM, NY, NC, ND, OH, OK, OR, PA, SC, TN, TX, UT, VA, WA, WI AZ CA CO NE NV WY. No other states will be consider.
Your pay and benefits (Total Rewards) are important components of your Journey at Banner Health. Banner Health offers a variety of benefit plans to help you and your family. We provide health and financial security options, so you can focus on being the best at what you do and enjoying your life.
Within Banner Health Corporate, you will have the opportunity to apply your unique experience and expertise in support of a nationally-recognized healthcare leader. We offer stimulating and rewarding careers in a wide array of disciplines. Whether your background is in Human Resources, Finance, Information Technology, Legal, Managed Care Programs or Public Relations, you'll find many options for contributing to our award-winning patient care.<div><div>
Job Description</div></div><div><div><div><div><div><div><div><div><div>
POSITION SUMMARY
This is a mid-level position that executes the foundational elements of major incident response and supports operational readiness when incidents are not active. This role focuses on reliable execution, accurate documentation, monitoring, and adherence to established processes under the guidance of senior coordinators, incident commanders, and the Major Incident Manager.
Working variable shifts and responding to 24x7 critical alerts on a mobile device or other connected platform for service disruptions is required for this role.
CORE FUNCTIONS
1. Works assigned shift and participates in on-call rotation to independently coordinate major incident bridge calls and collaboration channels. Supports Major Incident Commanders as directed.
2. Reviews, validates, and maintains incident records, timelines, and activity logs. Ensures completeness, accuracy, and timely closure.
3. Publishes approved outage notifications and status updates using standard templates; ensures accuracy, timeliness, and adherence to communication standards.
4. Monitors dashboards and system alerts across designated platforms. Analyzes alert effectiveness, identifies gaps or noise, and recommends improvements.
5. Partners with Problem Management to monitor RCA completion quality, ensures findings are documented, and tracks corrective actions to closure.
6. Monitors and reports on high-priority incident response SLAs and KPIs (MTTR, incident counts, communication timeliness); escalates risks or trends as identified.
7. Reviews playbooks, contact lists, and templates for accuracy. Submits recommended updates based on observed gaps or incident learnings.
8. Maintains up-to-date knowledge of enterprise technology platforms, security policies, major incident processes, core stakeholders, and downtime procedures. Serves as a resource to Coordinator I staff.
MINIMUM QUALIFICATIONS
Experience and education as normally obtained through an Associate&rsquo;s degree and 1 year of relevant experience in IT operations, service desk, NOC, or incident management.
Demonstrated ability to independently coordinate major incidents. Experience leading incident bridges and coordinating cross-functional technical teams. Ability to assess impact, manage priorities, and maintain response cadence during active incidents.
Strong written and verbal communication skills, including stakeholder-facing updates. Proven ability to multitask effectively in high-pressure environments.
Ability and willingness to work variable shifts and respond to 24x7 critical alerts via mobile device or other connected platforms for service disruptions.
PREFERRED QUALIFICATIONS
Bachelor&rsquo;s degree in Information Systems, Computer Science, Healthcare Informatics, Healthcare Administration, Business Administration, or a related field preferred.
ITIL Foundation certification or equivalent practical experience.
Experience publishing outage notifications and executive-level status updates.
Experience analyzing incident trends or supporting continuous improvement initiatives.
Experience mentoring or supporting junior coordinators.
Additional related education and/or experience preferred.</div></div></div></div></div></div></div></div></div>
EEO Statement:
EEO/Disabled/Veterans
Our organization supports a drug-free work environment.
Privacy Policy:
Privacy Policy</div>

Senior Major Incident Coordinator

Search 10000+ Incident manager jobs near you this March. New roles added regularly across leading industries. Apply today.