Cybersecurity crisis manager

• Level of educationBac+5
• EmployabilityGood
• Starting salary€3,800
• Experienced salary€4,700
• MobilityAverage
• ROME codeM1802
• FAP codeM2Z

The strategic importance of the cybersecurity crisis manager

The crisis manager plays a decisive role in making organisations resilient against the growing threat of cyberattacks. The position is strategic for responding effectively to critical situations, minimising financial and reputational impact and keeping the business running.

What is a cybersecurity crisis manager?

The cybersecurity crisis manager coordinates the response to major incidents such as ransomware or breaches of sensitive data. They are at the heart of planning and executing crisis management strategies.

Main duties of the cybersecurity crisis manager

The duties include:

Coordinating teams: steering internal and external responders.

Planning: developing crisis management plans.

Communication: informing stakeholders and managing relations with the media.

Post-crisis analysis: identifying lessons learnt to improve protocols.

A typical day as a cybersecurity crisis manager

1. MorningThey catch up with the security teams on ongoing incidents and on alerts raised by the SIEM and EDR, to spot any situation that could turn into a crisis.
2. Late morningThey update the crisis management plans: alert procedures, everyone’s role, internal and external contacts, and message templates for customers, authorities and the media.
3. AfternoonThey prepare or run a crisis exercise with management, technical teams and communications staff, to test procedures, check the crisis communication tools and train everyone in their role.
4. End of the dayThey write up the lessons learned from a recent crisis or exercise and suggest improvements to the crisis protocols to the managers concerned.

When a crisis breaks out, such as a ransomware attack or a data breach, they activate the crisis unit, coordinate internal and external stakeholders and manage communications, including evenings and weekends.

Key skills to become a cybersecurity crisis manager

Technical skills:

• Command of security tools (SIEM, EDR).
• Knowledge of cyberattack analysis.

Soft skills:

• Leadership and quick decision-making.
• Ability to handle stress and tense situations.

Which training to become a cybersecurity crisis manager?

Recommended training:

• Bac+3 or Bac+5 degree in cybersecurity.
• Specialisations in crisis management or incident response.

Useful certifications:

• CISSP (Certified Information Systems Security Professional).
• CISM (Certified Information Security Manager).

What is the salary of a cybersecurity crisis manager?

Salary estimates:

Career prospects for a cybersecurity crisis manager

Opportunities include:

• Chief information security officer (CISO).
• Independent crisis management consultant.
• Cybersecurity trainer or speaker.

Why is this job in high demand?

With complex cyberattacks on the rise, organisations need specialists who can ensure their resilience. The role is also crucial for complying with regulations such as the GDPR.

Cybersecurity crisis manager or head of the CSIRT: what’s the difference?

Both roles work side by side during a cyberattack, but they do not do the same job:

FAQ about the cybersecurity crisis manager job

What tools does a crisis manager use?

Tools such as SIEM, EDR and crisis communication platforms.

Is a degree in cybersecurity compulsory?

A degree is preferable, but a certification and experience can be enough.

How long does it take to become a crisis manager?

On average, 5 to 7 years of studies and experience.

Which industries are recruiting?

Finance, healthcare, telecommunications and public services.