Incident Response – Engagement Coordinator

WHO WE ARE 

S-RM is a global intelligence and cyber security consultancy.  Since 2005, we’ve helped some of the most demanding clients in the world solve some of their toughest information security challenges.   

We’ve been able to do this because of our outstanding people.  We’re committed to developing sharp, curious, driven individuals who want to think critically, solve complex problems, and achieve success.   

But we also know that work isn’t everything. It’s about the lives and careers it helps us build.  We’re immensely proud of this culture and we invest in our people’s wellbeing, learning, and ideas every day. 

We’re excited you’re thinking about joining us. 

 

WORKING IN CYBER AT S-RM

Our Cyber Security division is the fastest-growing part of S-RM.  The cyber sector is always evolving, and our Advisory, Ethical Hacking, and Incident Response practices are in more demand than ever.  

We’re building a team to meet this challenge.  We’re quick to respond, innovate, and improve.  We don’t get too hung up on hierarchy or bureaucracy.  If your ideas are good enough, we’ll empower you to implement them.  If you’re the best person to talk to a customer, you’ll get that opportunity, regardless of the title in your email signature. And when you need a hand, your team will always have your back. 

We also don’t believe there’s a typical cyber security professional.  We’ve built a team of intelligence analysts, technical specialists, software developers, investigators, risk managers, and more.  You’ll always find a range of perspectives and expertise to help you learn and grow.  

If that sounds like your kind of team, we’d like to hear from you. 

THE ROLE 

The Incident Response Engagement Coordinator supports S‑RM’s Incident Response teams by owning and coordinating the administrative, operational, and process‑driven activities required to successfully run cyber incident response engagements.

This role provides end‑to‑end case administration support across the incident lifecycle enabling Engagement Leads (ELs) and senior Incident Response leadership to focus on client management, technical oversight, and strategic decision‑making.

The role acts as part of a central operational hub, working closely with Engagement Leads, management, the wider Operations team, Finance, and external stakeholders (counsel, insurers, end clients) to ensure cases are launched, managed, and closed in a consistent, efficient, and well‑governed manner.

 

RESPONSIBILITIES

Case Onboarding

• Support case intake and kick‑off activities, including:
• Acknowledge incoming requests for scoping calls. Help coordinate such calls working closely with ELs and senior IR management
• Initiating internal case automation and onboarding workflows
• Ensuring accurate case setup across internal systems and tooling
• Assist ELs in coordinating early‑stage logistics to ensure cases move smoothly from intake to active response
• Act as an administrative point of contact during the initial stages of an engagement to reduce friction and delays

Letters of Engagement (LOEs) and Contracts

• Prepare, issue, and manage LOEs at the direction of ELs and other consultants
• Distribute LOEs to legal counsel, insurers, and clients, including via DocuSign where required
• Track LOE execution status, proactively chase signatures, and confirm completion
• Coordinate kick off readiness once LOEs are fully executed, escalating issues or delays as needed

Budget Management

• Support ELs in tracking budget consumption and maintaining financial oversight throughout engagements
• Help coordinate uplift requests at the direction of ELs, including:
  • Tracking hours used vs approved budgets
  • Supporting preparation and circulation of uplift requests
  • Following up on approvals with insurers, counsel, or internal stakeholders
• Work closely with ELs and Finance to maintain accurate and up-to-date financial data

Revenue Control

• Monitor billable time entry on a weekly basis, following up with consultants to resolve gaps and chase any missing time entry
• Report Work in Progress (WIP) to Finance and support accurate forecasting and budget visibility on a monthly basis
• Ensure WIP integrity, validating that all time held is justified and chargeable
• Coordinate fast and accurate invoicing with the Senior Billing Coordinator at Engagement Lead direction, including collating the required information and supporting invoice approval workflows
• Ensure accurate cross-charging of billable time across relevant practice areas
• Support payment chasing in coordination with Finance/Credit Control, escalating overdue items where appropriate
• Cleanse non-billable codes monthly basis to ensure financial hygiene

 

Case Offboarding

• Coordinate case close‑out procedures, including:
  • Issuing data deletion notices and tracking notice periods
  • Handling data deletion and decommissioning of case-specific platforms and tooling instances
  • Ensuring case data is fully and accurately captured in internal platforms
• Supporting introductions to Managed Services and Risk and Resilience teams where applicable
• Track closeout completion and escalate gaps or issues as needed

 

Stakeholder and Internal Coordination

• Act as a reliable operational interface between consultants, senior leadership, the wider Operations team, Finance and Credit Control, and external stakeholders where required
• Ensure information flows efficiently, issues are escalated, and that administrative actions do not become bottlenecks for delivery teams

 

OUR BENEFTTS 

We offer thoughtful, balanced rewards and support to help our people do their best work and live their lives outside it, including:

• 25 days holiday per year in addition to bank holidays (+1 day for every year of service up to a maximum of 30 days).
• Matching pension contribution up to 7% (up to a maximum of 14% combined), and financial education
• Life Insurance 4X Annual salary

• Parental Support:
• Fertility treatment leave – 5 days of leave per cycle of treatment per year;
• Maternity leave – 26 weeks of full pay followed by 13 weeks of half pay;
• Paternity leave – 6 weeks of full pay.

• Various Health and Medical Benefits including:
• Private dental and medical insurance (taxable benefit);
• Virtual GP for you and your family members that live in the same household;
• Gym discounts for you and your partner;
• EAP programme for you and your immediate family;
• Free access to the mindfulness app Headspace;

 
The successful candidate must have permission to work in the United Kingdom by the start of their employment. 

To apply for this role, please submit an up-to-date CV through this link: Job Application for Incident Response – Engagement Coordinator at S-RM