{"id":4148610,"url":"https://alion.io/job/sgs-incident-response-manager","title":"Incident Response Manager","company":{"id":3634,"name":"SGS","domain":"sgs.com","url":"https://alion.io/company/sgs","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":75,"open_postings":631,"ghost_share":0,"stale_share":0.997,"repost_share":0,"time_to_fill_p50_days":34,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Centurion, South Africa"],"countries":["ZA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"PCI DSS","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-11-12T08:10:33Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-12T08:17:17Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"SGS is the world’s leading inspection, verification, testing and certification company. SGS is recognized as the global benchmark for quality and integrity. With more than 97,000 employees, SGS operates a network of over 2,600 offices and laboratories around the world.\n The Incident Response Manager is responsible for leading the cybersecurity incident response program for clients. This role ensures rapid detection, containment, eradication, and recovery from security incidents while minimizing business impact. The manager will coordinate across IT, security, legal, and executive teams, and act as the primary point of contact during cyber crises.\nKey Responsibilities\nIncident Response Leadership\nLead the response to cybersecurity incidents, including triage, containment, eradication, and recovery.\nCoordinate communication between technical teams, executives, and external stakeholders.\nMonitoring & Detection\nOversee security monitoring tools (SIEM, IDS/IPS, endpoint detection).\nEnsure timely detection of suspicious activity and potential breaches.\nInvestigation & Forensics\nDirect forensic analysis of compromised systems.\nPreserve evidence for legal or regulatory purposes.\nDocument root cause analysis and lessons learned.\nCollaboration & Communication\nWork closely with IT, legal, compliance, and executive leadership during incidents.\nProvide clear, concise updates to stakeholders.\nLiaise with external partners such as law enforcement, regulators, and vendors.\nTraining & Preparedness\nConduct incident response drills and tabletop exercises.\nTrain staff on security awareness and escalation procedures.\nContinuously improve incident response capabilities.\nPolicy & Compliance\nEnsure compliance with data protection laws (e.g., POPIA in South Africa, GDPR if applicable).\nMaintain alignment with industry standards (ISO 27001, NIST Cybersecurity Framework).\n Bachelor's degree in Computer Science and Informatics\nHonours degree in Computer Science (Specialising in Cybersecurity)\nGIAC Certified Forensic Analyst (GCFA)\n3+ years of experience in incident response, SOC operations, or cybersecurity management.\nStrong knowledge of network security, malware analysis, and digital forensics.\nFamiliarity with regulatory frameworks (POPIA, GDPR, PCI DSS).\nExcellent leadership, communication, and crisis management skills.\n Core Competencies\nAnalytical thinking and problem-solving under pressure.\nAbility to manage multiple incidents simultaneously.\nStrong leadership and team coordination skills.\nClear communication with both technical and non-technical audiences","description_format":"text","description_chars":2581,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Testing, Inspection & Certification"],"lifecycle":[{"event":"open","at":"2026-11-12T08:17:17Z"}],"visa":[],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.602,"p_room":1,"age_days":0,"expected_fill_days":34,"reasons":["conf:2","stale_co","win:early","comp:brand"],"computed_at":"2026-11-12T10:38:37Z"},"pay":null,"html_url":"https://alion.io/job/sgs-incident-response-manager","json_url":"https://alion.io/job/sgs-incident-response-manager.json","meta":{"generated_at":"2026-11-12T12:49:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26502,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3634},"rest":"https://alion.io/mcp/rest/get_company?id=3634"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsgs-incident-response-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsgs-incident-response-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsgs-incident-response-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sgs-incident-response-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsgs-incident-response-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4148610}},{"tool":"search_jobs","arguments":{"company":"sgs.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4148610},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}