Information Security Incident Liaison

About the role

Our central Cybersecurity Operations Center (CSOC) provides 24/7 monitoring and incident response for the group. To make incident handling effective across the business, we’re looking for an Information Security Incident Liaison to act as the bridge between the CSOC, our business stakeholders, and external suppliers.

This role is not traditional SOC work. You won’t be triaging alerts or investigating logs. Instead, you’ll ensure the right people are informed at the right time, coordinate incident activities within your scope (i.e., procurement/supplier-facing operations), and maintain clear documentation and reporting.

What you will do

• Serve as the primary point of contact for security incidents affecting your business scope (i.e., supplier/procurement operations).
• Coordinate communication between the central SOC, internal stakeholders (business, IT, legal, procurement), and relevant suppliers.
• Ensure incident information is captured and documented in the incident management system (timelines, decisions, actions, key communications).
• Organize and facilitate incident-related meetings/war rooms, including agendas, attendee coordination, notes, and action tracking.
• Support the CSOC by gathering non-technical context (business impact, supplier contacts, operational dependencies) and relaying it back quickly.
• Drive follow-ups after incidents: lessons learned, corrective actions, and confirm closure within your scope.
• Create recurring deliverables such as monthly/quarterly/bi-annual incident summaries, trends, and management-ready reporting.
• Help improve incident readiness within your area (contact lists, escalation paths, comms templates, supplier notification routines).

What you bring

Must-have

• Experience in information security, risk/compliance, IT operations, service management, or a similar coordination-heavy role.
• Strong ability to coordinate stakeholders under time pressure and keep communication structured and calm.
• Comfortable writing clear, professional documentation: incident summaries, timelines, stakeholder updates, and executive-friendly reports.
• Good understanding of incident response concepts and terminology (severity, containment, business impact, post-incident actions), even if you’re not hands-on technical.
• Strong interpersonal skills required to work with technical SOC staff and non-technical business/supplier contacts.

Nice-to-have

• Experience working with suppliers / third parties (TPRM, procurement, vendor management, outsourcing).
• Familiarity with ITIL / incident management processes and tools (e.g., ServiceNow, Jira, Remedy).
• Understanding of regulatory or contractual notification requirements (e.g., GDPR breach communication, NIS2/DORA).
• Experience running post-incident reviews and driving action tracking.