Incident Response Manager – Cyber Security

About the role

The Incident Response Manager will lead the detection, analysis and remediation of cyber security incidents across TUI’s global operations. Working within the Security Operations team, you will help protect the company’s digital assets and minimise the impact of threats.

Key responsibilities

• Develop, maintain and assess the Cyber Incident Response Plan.
• Design and implement procedures for incident handling, analysis and reporting.
• Identify, analyse, mitigate and communicate cyber incidents, applying problem‑management to prevent recurrence.
• Collect and correlate threat intelligence from multiple sources to produce actionable insights for tactical, operational and strategic stakeholders.
• Evaluate the resilience of security controls and develop testing techniques for incident handling.
• Collaborate with Secure Operation Centres, Computer Security Incident Response Teams and global IT operations.
• Document all incident handling actions comprehensively and ensure timely reporting.

Required profile

• Specialist experience in cyber incident response and threat intelligence.
• Proven ability to analyse complex security events and communicate findings to diverse audiences.
• Strong collaboration skills to work with global security, IT and operations teams.
• Commitment to continuous improvement of incident handling processes.

Required skills

What we offer

• Attractive remuneration with discretionary bonus schemes.
• Generous travel benefits and extensive health & well‑being support.
• Flexible working environment promoting work‑life balance.
• Access to the TUI Learning Hub for career development.
• Opportunities to work on global projects and engage in community initiatives.