Director, Digital Forensics & Incident Response (Global)
(Open to Associate Director with progression path to Director)
The purpose of this role is to lead NCC Group’s global Digital Forensics and Incident Response (DFIR) capability, ensuring effective preparedness, response, recovery, and continuous improvement across cyber incident management and forensic investigations. The global DFIR team will consist of regionally distributed colleagues, delivering a consistent, scalable, and market-leading service that protects client assets, reputation, and business operations. The role is responsible for setting strategic direction, driving operational excellence, evolving people, process and technology capabilities, and supporting commercial growth through the conversion of incident response engagements into ongoing security service opportunities.
The Director, DFIR will be responsible for ensuring robust cyber resilience capabilities, overseeing major cyber incidents, maintaining advanced forensic practices, and ensuring the function remains aligned with changing client requirements, regulatory obligations, and emerging cyber threats. The role also serves as a senior leader within the Cyber Intelligence and Response business, influencing stakeholders and driving continuous service improvement.
A key part of the role is engaging and collaborating with leaders across NCC Group to achieve the following ambitions:
- Define and execute a global DFIR strategy aligned to business priorities and risk appetite.
- Strengthen cyber incident preparedness, response, and recovery capabilities.
- Develop and scale advanced digital forensic capabilities across endpoint, network, and cloud environments.
- Embed lessons learned from incidents, exercises, and reviews into continuous improvement initiatives.
- Drive operational excellence through effective capacity planning, resource management, and performance measurement.
- Support business growth by identifying opportunities to transition incident response engagements into long-term security services.