KPMG UK
Cyber Response & Recovery Assistant Manager (Reactive)

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Cyber Response & Recovery Assistant Manager (Reactive)
Cyber Response & Recovery Assistant Manager (Reactive)
Location: Base locations in London/Manchester, plus a network of 20 offices nationwide. Learn more about office locations
About KPMG
The KPMG Advisory function is pivotal to our business, operating across the UK to deliver meaningful solutions. As one of the world’s largest and most respected consultancies, we have supported the UK through diverse challenges—from conflicts to economic downturns—and serve as a trusted partner to institutions and businesses shaping the nation.
Our multidisciplinary approach covers areas such as:
- Customer Experience & Digital
- Strategy
- Forensic, Risk & Regulatory
- People & Talent
- Operational & Financial Transformation
We embed deep sector expertise and technology-driven solutions to achieve outstanding results and deliver "right first time" outcomes for our clients.
Why Join KPMG as a Cyber Response & Recovery Assistant Manager?
This role is within the Cyber Response Services (CRS) Team in our Advisory practice, reporting directly to senior leadership. Cybersecurity is a key growth area for KPMG, as our clients face evolving threats and demand experts to:
- Understand and mitigate cyber risks
- Provide critical incident response support
- Apply specialist knowledge to secure client outcomes
As part of just nine Tier 1 responders in the UK, you’ll be part of a high-performing team handling diverse engagements. Your responsibilities include incident response, threat intelligence, forensics, and consultation, while also advancing through tailored security certifications and professional development.
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Key Responsibilities
You will be responsible for:
-
Performing reactive cybersecurity incident response for clients, including:
- On-call availability (approx. one weekend every month)
- Digital forensics (e.g., analysing disk, memory dumps, network packets, log files)
- Rapid threat assessment and advisory on relevant attacks
-
Maintaining a current perspective on evolving cyber threats to advise clients on risks and countermeasures
-
Collaborating with clients on delivery, implementation, and project issues
-
Generating policy, documentation, and well-structured bid/response proposals
Qualifications & Requirements
Essential
- A 深层次理解 of the cybersecurity threat landscape
- Strong technical background in computing, networking, and programming (terminology must be correct)
- Proven experience in responding to cyber incidents and replication measures
- Familiarity with information security methodologies and best practices
Leadership in skills
- Interpersonal, communication, and written documentation skills of a high standard
Skills & Qualifications We Value


Get help with your application
Your very own career expert that helps elevate your application to the next level.
- Current or pursuit of a government security clearance (SC/DV)
- Preferably holds or is seeking certifications such as:
- CREST Certified Incident Manager (CCIM)
- GIAC Certified Incident Handler (GCIH)
- CREST Certified Practitioner Intrusion Analyst (CPIA)
- A degree qualifications in cybersecurity, computer science, or relevant STEM discipline (MSc preferred)
Our Culture & Flexibility
We operate from 20 sites nationwide, supporting a hybrid model including office-based, remote working, flexible hours, and part-time options, as needed.
At KPMG, we strive to foster inclusivity and accessibility through programmes including:
For further information on values, competencies, and the application process, visit:
Ready to apply? Create an account and upload your CV and join us in making a difference.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location