Senior Lead Analyst - Cyber Investigations Assurance

About the role

Ramboll is looking for a Senior Lead Analyst for Cyber Investigations Assurance to join its Global Information Security Governance & Assurance team. The role supports the group's response to cyber incidents, SpeakUp cases and other sensitive investigations, acting as the internal investigation coordinator and assurance lead. It sits under Global Information Security Assurance and Governance and works closely with Legal, HR, Risk and Technology. External specialist partners support execution when independence, scale or specialist expertise is needed.

Key responsibilities

• Coordinate and support cyber incident, SpeakUp and other investigation activities, including intake, triage, escalation and case management
• Own investigation governance, documentation standards, evidence handling requirements and SLA oversight
• Manage and oversee external forensic and investigation partners, including readiness, activation and quality assurance
• Support assurance and audit activities within the Global Information Security Governance & Assurance area, ensuring independence and avoiding self-review
• Drive continuous improvement of incident management, investigation procedures and assurance frameworks
• Lead end-to-end investigations such as incident response support, insider threat investigations and data breach analysis and root cause determination
• Design and lead enterprise-wide red team exercises, including full-scope adversary emulation (APT simulation) and cloud, network, application and identity attack scenarios

Required profile

• Experience working with cyber incidents, investigations, forensics, compliance, audit or assurance in a complex organisation
• Strong understanding of governance, independence and confidentiality in sensitive cases
• Proven ability to coordinate multiple stakeholders and external partners under time pressure and strict SLAs
• Sound judgement, integrity and discretion when handling sensitive information
• Strong written and spoken English
• Experience delivering red team and adversary simulation reports

What we offer

• Flexible work environment with the possibility of working from home a few days a week
• Commitment to professional and personal development
• A leadership culture based on Leadership Principles and a culture that welcomes each person as they are

Applications and CVs are submitted online; the deadline is 31/10/26. Candidates who do not meet every requirement are encouraged to apply.