- Full time, permanent role
- Enjoy excellent career progression in a ‘hands-on’ leadership role
- Work with Partners who are truly invested in your professional development

Grant Thornton Australia is one of Australia’s leading professional services firms, providing audit, tax, and advisory services to a diverse range of clients. Our culture is underpinned by a commitment to our clients, people and communities, and our promise to ‘Reach for Remarkable’ by providing proven expertise, principled execution, and personalised experience. In Australia we're proud to support the careers of more than 1,500 remarkable people. Backed by six Australian offices and a global network spanning more than 150 markets, we offer the scale, connections and opportunities to help you shape your future, wherever it takes you.

About this role

We’re growing our incident response capability for an AI-enabled threat world and looking for a commercially astute Senior Manager to help lead it on the ground. AI is making nation states, organised crime and individual attackers faster and more effective, and many organisations are struggling to keep up. When a threat succeeds, clients need more than a plan on a shelf. They need someone who can take control, coordinate the response across executives, legal, insurers and technical teams, and get the business operating again. This role is for someone who has done that, and who wants to help build a truly differentiated incident response service as part of a global network of cyber professionals and capability. If you’ve been in the room when a major incident hits, kept a explicit head while everyone else wanted answers,



and have the war stories to go with it, this is the role for you.

What you’ll do

- Lead client incident response engagements end to end, from triage and containment through to eradication, recovery and post-incident review.
- Act as incident lead and senior escalation point for major client incidents, coordinating response activity across client teams, legal counsel, insurers, managed security service providers and other third parties.
- Work alongside client executives and crisis management teams, aligning incident response with business continuity and executive decision-making to minimise impact and speed up recovery.
- Lead and mentor a team of incident response specialists across digital forensics, threat intelligence and threat hunting, with responsibility for their development and career progression.
- Manage investigations, making sure the right people are assigned and every action is accurately documented in line with established processes, standards and frameworks.
- Prepare and review technical reports and executive summaries, translating what happened, why it matters and what to do next into terms boards and executives can act on.
- Use threat intelligence and proactive threat hunting to help clients prepare for,



prevent and identify the threats targeting their organisation.
- Help clients get ready before an incident happens, through readiness assessments, incident response plans, playbooks, escalation processes and tabletop exercises.
- Shape how automation and AI-enabled workflows strengthen our detection and response capability, while keeping the right human oversight, governance and accountability in place.
- Build and hold client relationships, identify follow-on opportunities and contribute to proposals, incident response retainers and sustainable service delivery.
- Work as part of a global network of incident response professionals, drawing on shared capability while building a locally relevant and differentiated service.
- Contribute to how the practice develops, including playbooks, procedures, technology partner engagement and bringing new people through.
- Take part in an on‑call roster to support clients in an emergency.

What you’ll need

- Significant experience leading cyber security incident response, whether in a consulting or incident response provider, an in‑house CSIRT, or a security operations centre.
- Hands‑on depth across incident management, digital forensics, threat intelligence and threat hunting.
- Experience with the platforms and tooling behind modern detection and response.
- A strong understanding of incident response frameworks and best practice, and of Australian regulatory and breach notification obligations.
- A track record of leading and developing teams, and a genuine interest in doing it.
- Experience wor

📌 Senior Manager, Incident Response (Sydney)
🏢 Grant Thornton Australia
📍 Sydney