Incident Response Lead

Overview The Incident Response Lead is responsible for leading cyber incident detection, investigation, containment, eradication, recovery, and post incident activities across Axiata Cyber Fusion Center (ACFC). The role provides technical leadership and coordination for cyber incident response, digital forensics, threat hunting, intelligence-driven defense, and continuous improvement of detection and response capabilities. The incumbent will work closely with SOC analysts, Security Engineering, Threat Intelligence, Operational Companies (OpCos), Technology teams, and external partners to ensure timely and effective handling of cyber threats and incidents while strengthening the organization's cyber resilience. Key Responsibilities Cyber Incident Response & Management Lead the end-to-end management of cyber security incidents, ensuring appropriate prioritization, investigation, containment, eradication, and recovery activities Act as the primary escalation point for high-severity security incidents and coordinate incident response activities across OpCos and stakeholders Direct cyber incident bridge calls and crisis management activities during major security incidents Ensure incident response activities are executed in accordance with established SLAs, regulatory requirements, and organizational policies Develop and maintain incident response playbooks, runbooks, escalation matrices, and standard operating procedures (SOPs) Conduct post-incident reviews, root cause analys