Share this Job

Cyber Security Incident Manager (m/f/d)

Date: 02-Dec-2022

Location: MÜNCHEN, Germany

Company: Telefonica S.A.

Contract type: full-time, unlimited
Location: Munich, Düsseldorf, Berlin (Teltow), Nuremberg, Hamburg
Entry: At the earliest possible date

Working anywhere. After a successful application process, you have the opportunity to work anywhere in Germany. You will be assigned to the nearest Telefónica location according to your place of residence. We will discuss further details with you during the application process.


Who we are?
We are o2/Telefónica - with our mobile brands we connect millions of people and offer our customers mobile freedom in the digital world. As a leading telecommunications provider, we are also playing a key role in shaping digitisation in Germany. Our fixed and mobile networks form the backbone for the digital transformation of the economy and society. And our approximately 8,000 employees in Germany drive the transformation forward every day - in our own company as well.


Telefónica is one of the top employers in Germany and is part of the global telecommunications group Telefónica S.A. with 114,000 committed employees worldwide. 


You too can become part of our unique team and let us make a difference together!


Objective of this job: The role of the Cyber Security Incident Manager is to manage and coordinate response and recovery activities of information security incidents and manage function-related business processes. This includes complete e2e management of security incidents including analysis, containment and eradication, alongside collaboration with appropriate business partners and providing them with business insight as to the status, impact and necessary actions in regards to such incidents. The role will also play a vital part in constant Incident Response Lifecycle improvements and overall maturity enhancement of Telefonica’s Cyber Defense Center (CDC).


What are your challenges with us?

  • Being the point of contact and manage different cyber security incidents. Lead and act as the key moderator for conference calls 
  • Keep incidents status up to date through regular updates 
  • Oversee all aspects of incident management process from identification to remediation and post incident activities
  • Drive incidents to a conclusion based on the time frame defined for the incident criticality level 
  • Coordinate the activities of analysts and parties outside of CDC involved in the incident
  • Drive regular tabletop exercises and Blue/Purple team tests for the team to keep them updated and ready for the time of an incident
  • Collaborate with all internal CDC team such as Analysts, Vulnerability Managers, Threat Intelligence Specialists, CDC Operational Specialists
  • Identify, collect, document and address all post incident items
  • Contribute to the overall Cyber Defense Center Reporting 
  • Being on call if necessary and Operate outside normal office hours if and when required


What are you bringing?

  • Bachelor’s degree in Computer Science / Information Technology or equivalent experience
  • Relevant industry-recognized security certifications such as CISSP, GCIH, ECIH 
  • 8+ years of experience with information security related activities 
  • 4+ years of experience in managing and handling security incidents in large corporate environments as part of a Cyber Incident Response function
  • Excellent communication skills (communicating and reporting complex technical concepts to business and risk stakeholders)
  • Experience dealing directly with senior stakeholders – Directors and VP level
  • Deep technical expertise in cyber threat and crisis management 
  • Strong understanding of enterprise-level information systems and technology architectures, expertise in network security, cryptography, virtualization and cloud security. 
  • Familiarity with risk management and controls frameworks, cyber kill chain and SANS Incident Handling lifecycle 
  • Strong understanding & knowledge of regional and global IR and monitoring technological and trend landscape 
  • Being able to work with a diverse set of stakeholders in the organization from technical through board level 
  • Strong written and verbal communication in English and/or in Germany
  • Understanding of crisis management, business continuity and disaster recovery plans and procedures
  • Strong report writing and communication skills 
  • Ability to understand technical topics dealing with technical teams and explain and present them to management level executives
  • Being able to handle multiple competing priorities in a fast paced environment to proceed high priority tasks to a resolution
  • Strong track-record of managing performance to deliver against challenging KPIs and continuous improvement initiatives


Your Benefits

Workplace: Modern and ergonomically equipped offices, as well as an open space and open desk model.

Communication: A smartphone of your choice for business and private use as well as the possibility to provide for your partner, friends and family via credit is a matter of course for us.

Catering is taken care of: Free coffee specialties and water are at your disposal at any time as well as a canteen and a cafeteria.

Individual development: With a personal development plan and continuous training you will reach your goals with us. In addition, with "Beyond" you can also get a taste of other interesting areas by means of job or project rotations. 

Retirement provision: Various models of retirement provision are available to you (e.g. capital-forming benefits, company pension scheme, etc.)

Social commitment: We are also involved outside the company, you have the opportunity to participate in Telefónica "Volunteering Days" or "Volunteering Holidays", for example.

Health: Under FEEL GOOD you will find a wide range of offers for your personal health and the compatibility of work and leisure. It ranges from exercise and relaxation programmes, webinars and cooperation projects to a comprehensive range of advice on child and elderly care and psychosocial counselling.


How to apply and what else you should know?

Convince us with your meaningful curriculum vitae as well as corresponding certificates. You do not need a letter of motivation with us. Please note that applications are only possible via our applicant portal and applications by e-mail cannot be considered.

Do you have questions about our application process and are you interested in further information about the position? Please reach out to our Talent Operations Team (


In case of same qualification, applicants (m/f/d) with severe disability will be preferred. All gender are equally welcome.