Cyber Defense Incident Responder – Associate Director

About the role

The Senior Cyber Incident Response Coordinator will lead global incident response efforts for EY, coordinating complex cybersecurity events and ensuring rapid resolution. This senior position requires deep expertise in incident response, forensics, and stakeholder management across multiple regions.

Key responsibilities

• Coordinate complex global cybersecurity incidents, often outside normal working hours.
• Serve as liaison with business units, legal, data privacy, risk management, vendors and external parties.
• Develop and maintain processes, documentation and metrics for continuous improvement of the incident response program.
• Lead and mentor junior members of the Cyber Incident Response team.
• Provide timely reports and communications to leadership during and after incidents.

Required profile

• 10+ years of experience in information security, SOC, threat intelligence, detection engineering or related cyber‑defense functions.
• 5+ years in security operations, incident coordination or digital forensics.
• Strong communication, diplomacy and decision‑making skills in high‑pressure environments.
• Experience working globally with diverse cultures and regulatory frameworks.

Required skills

• SIEM technologies (e.g., Microsoft Sentinel).
• Cloud platforms and investigation consoles (e.g., Azure).
• Digital forensics tools and methodologies, including log correlation and malware analysis.
• Deep knowledge of Windows and Unix/Linux operating systems, as well as IoT, mobile and other non‑standard devices.
• Automation of incident response processes.