We study an agency problem between a leader (the principal) seeking to design an optimal incentive scheme to a follower (the agent) to increase the value of a risky project subjected to accidents and volatility uncertainty. The agency problem is formulated as a max-min bilevel stochastic control problem with accidents and ambiguity. We show that the problem of the follower is reduced to solve a second order BSDE with jumps, reducing the problem of the leader to solve an integro-partial Hamilton-Jacobi-Bellman-Isaacs (HJBI) equation. By extending stochastic Perron's method to our setting, we obtain viscosity sub- and supersolution envelopes for the Principal's integro-HJBI equation. Under an additional comparison principle in a suitable polynomial growth class, these envelopes coincide and the Principal's value is identified with the unique viscosity solution. The holding company seeks to design an optimal incentive scheme to mitigate these losses. In response, the subsidiary selects an optimal cybersecurity investment strategy, modeled through a stochastic epidemiological SIR (Susceptible-Infected-Recovered) framework. The cyber threat landscape is captured through an L-hop risk framework with two primary sources of risk, internal risk propagation via the contagion parameters in the SIR model, and external cyberattacks from a malicious external hacker. The uncertainty and adversarial nature of the hacking lead to consider a robust stochastic control approach that allows for increased volatility and ambiguity induced by cyber incidents. We illustrate our results with numerical simulations showing how the contracting mechanism enhances the quality of a cluster under cyber threats.