Team Lead Incident Management (Cybersecurity)

Location: Madrid, Spain; hybrid setup combining work from home and office premises.

Base salary: EUR 60,000–100,000 per year for a full-time role, with potential performance-based rewards and benefits.

Company

hirify.global provides reinsurance, insurance, and risk-transfer solutions, including services addressing cybercrime and organisational resilience.

What you will do

• Lead the Cyber Incident Management team and strengthen cyber incident response capabilities across hirify.global.
• Develop and maintain incident response plans, procedures, playbooks, and emergency management documentation.
• Manage technical and non-technical responses to major cyber-attacks, including detection, containment, eradication, and recovery.
• Mobilise regional and global response teams, coordinate stakeholders, and deliver executive-level incident briefings.
• Organise tabletop exercises and simulations, conduct post-incident reviews, identify root causes, and drive continuous improvement.
• Lead, inspire, and develop the Incident Management team while supporting threat intelligence, cyber defence, and organisational resilience.

Requirements

• Experience leading cyber incident response, security operations, or comparable technology teams in complex international environments.
• Hands-on understanding of the incident response lifecycle, including preparation, detection, containment, eradication, recovery, and lessons learned.
• Experience collaborating with senior management, technology, business, Legal, Compliance, Communications, and Risk Management stakeholders.
• Strong judgement, structured decision-making, composure under pressure, and a commitment to continuous improvement.
• Leadership experience with international teams and the ability to work in a hybrid setting.
• Excellent written and spoken English; availability for out-of-hours responses and on-call arrangements when required.

Nice to have

• Experience with cyber crisis management, tabletop exercises, executive briefings, or regulatory incident reporting.
• Knowledge of threat intelligence, Cyber Defence Operations, resilience frameworks, or major incident management.
• Relevant security, incident response, or crisis management certifications.

Culture & Benefits

• Hybrid work model balancing home working and office presence.
• Inclusive environment focused on equal opportunities, diverse perspectives, and professional development.
• Performance-based rewards and additional benefits may be available.
• Participation in a global security and technology organisation focused on resilience and continuous risk accountability.