CMS-Senior-Incident Orchestrator

The opportunity

The Incident Orchestrator is responsible for coordinating, driving, and governing the execution of security incidents identified by the SOC. The role ensures that incidents are triaged correctly, escalated appropriately, and resolved within defined SLAs, acting as the central coordination point between SOC analysts, threat detection teams, IT responders, and incident response leadership.

The role operates in accordance with the enterprise Incident Response Plan and Policy, supporting structured, repeatable, and auditable incident handling

Your key responsibilities