Cyber Incident Manager

Maersk is a global leader in integrated logistics and has been industry pioneers for over a century. Through innovation and transformation, we are redefining the boundaries of possibility, continuously setting new standards for efficiency, sustainability, and excellence.

At Maersk, we believe in the power of diversity, collaboration, and continuous learning, and we work hard to ensure that the people in our organisation reflect and understand the customers we exist to serve.

With over 100,000 employees across 130 countries, we work together to shape the future of global trade and logistics.

Join us as we harness cutting-edge technologies and unlock opportunities on a global scale. Together, let's sail towards a brighter, more sustainable future with Maersk.

This is not a typical SOC or CERT role. As a Cyber Incident Manager, you will be at the centre of high-impact cyber incidents, driving decisions and helping teams navigate complex situations. You will join our innovative Fire Team approach, which brings together diverse cyber disciplines to respond, adapt, improve and innovate as one team.

Alongside managing incidents, you will help shape how we respond and contribute to the continued development of our cyber capabilities. The operating model provides opportunities to rotate between incident response, technical activities, tabletop exercises, innovation, training and continuous improvement.

What We Offer

This is an exciting career opportunity to work in a multinational, Global 500 company that makes global trade happen. You will be interacting daily with colleagues internationally, giving you the opportunity to develop your professional skills in a global environment. We provide support for you to shape your own career by achieving expertise and learning on the job.

• Protect critical operations and work on cyber incidents with real business impact at global scale.
• Develop your capabilities through training platforms, certifications, simulations and CTF exercises.
• Expand your experience through exposure to threat hunting, purple teaming, detection engineering and forensics.
• Benefit from flexible remote working, occasional in-person team events and a strong focus on work-life balance.

Key Responsibilities

• Lead and coordinate high-priority cybersecurity incidents from identification through to closure.
• Facilitate incident bridge calls, driving decisions, priorities and progress throughout the incident lifecycle.
• Coordinate technical teams, stakeholders and decision-makers to move incidents effectively towards resolution.
• Communicate incident status, risks and business impact to technical teams, stakeholders and senior leadership.
• Manage actions, decisions, dependencies and escalations, ensuring risks are understood and addressed.
• Produce high-quality incident reports and Post Incident Reviews, translating lessons learned into measurable improvements.
• Contribute to readiness activities, simulations, tabletop exercises, knowledge sharing and the continuous improvement of incident response processes and playbooks.

What We Are Looking For

• Continuous improvement mindset: We are looking for someone who brings a thoughtful improvement mindset, curious about how work gets done and motivated to make meaningful, sustainable improvements over time.
• Bring at least five years of experience in Major Incident Management, Crisis Management or a comparable leadership role.
• Demonstrate at least three years of experience in cyber operations, or a strong incident management background combined with familiarity and a genuine passion for cybersecurity.
• Provide structure, clarity and direction in complex situations while remaining calm, organised and focused under pressure.
• Communicate confidently with different audiences and produce polished reports, executive briefings and presentations.
• Coordinate and influence multiple technical and business teams without relying on formal authority, building alignment and maintaining accountability.

Experience using automation, AI or workflow tooling to improve operational efficiency would be valuable. Relevant certifications in cybersecurity, incident management, risk management or technology operations, such as GCIA, GSEC, GCIH, GCFA, CEH or ITIL, are beneficial but not essential. Experience working within a large, complex organisation and evidence of continuous professional development would also be welcomed.

#LI-JL2

Maersk is committed to a diverse and inclusive workplace, and we embrace different styles of thinking. Maersk is an equal opportunities employer and welcomes applicants without regard to race, colour, gender, sex, age, religion, creed, national origin, ancestry, citizenship, marital status, sexual orientation, physical or mental disability, medical condition, pregnancy or parental leave, veteran status, gender identity, genetic information, or any other characteristic protected by applicable law. We will consider qualified applicants with criminal histories in a manner consistent with all legal requirements.

We are happy to support your need for any adjustments during the application and hiring process. If you need special assistance or an accommodation to use our website, apply for a position, or to perform a job, please contact us by emailing  [email protected].