Head of Security Incident Response and Threat Management

About the role

Join the Security Incident Response and Threat Management team to protect Danske Bank’s critical services across the Nordic region. You will lead a technically strong team, guide investigations, and shape incident response capabilities in a rapidly evolving digital environment.

Key responsibilities

• Lead and develop a skilled incident response and threat management team.
• Manage major incidents, conduct investigations and make decisions in line with policy and legal requirements.
• Provide briefings to the Chief Security Officer on technical controls, response capabilities and major investigations.
• Design, refine and maintain incident response processes, runbooks and playbooks.
• Oversee digital forensics to ensure investigations are legally defensible.
• Support compliance activities, including regulatory requests and audits.
• Monitor KPIs for detection and containment times.
• Coordinate threat intelligence to support tactical and strategic functions.

Required profile

• Minimum 6 years of professional experience in cyber security operations.
• At least 4 years of daily threat monitoring and response activities.
• Minimum 2 years of people management or team leadership experience.
• Strong understanding of enterprise technologies and security controls.
• Ability to communicate clearly with technical and senior stakeholders.
• Knowledge of IT risks, controls and European financial regulations.
• Relevant certifications such as CISSP, GCIA, GCIH, OSCP or equivalent.
• Experience in financial services or regulated environments is a plus; a master’s degree in cyber security, computer science or related field is desirable.

What we offer

• Salary range €7,040 – €10,560 gross per month (Lithuania) based on competencies.
• Comprehensive employee benefits package including health insurance, mental‑well‑being support and pension contributions.
• Growth opportunities through internal mobility, professional certifications and development programs.
• Hybrid working model: up to two days remote, office budget after probation, modern workplace.
• Additional leave for rest, health, volunteering and education.
• Accidents & critical disease insurance, travel insurance and financial support for unforeseen events.