Cyber Incident Response Leader (Associate Director)

EY; Liverpool; On-site; GBP 90,000 - 120,000; Full time

Job summary

EY is seeking a Senior Cyber Incident Response Coordinator to lead complex global cyber incident containment, investigation, and recovery. You will coordinate with Legal, Data Privacy, and Risk Management teams, while guiding junior staff and improving incident response processes.

The role requires senior expertise in forensics, incident response, and threat analysis, with strong communication and diplomacy to operate across executive stakeholders and time zones.

Qualifications

• Mastery of incident response lifecycle and global coordination.
• Experience across cybersecurity incident response, forensics, and cyber defense functions.
• Ability to navigate legalities of electronic discovery and data collection.

Responsibilities

• Coordinate complex global cybersecurity incident responses and manage off-hours coverage.
• Serve as liaison with Legal, Data Privacy, Risk Management, and business partners.
• Develop and improve incident response processes and documentation.
• Deliver leadership reports and metrics on incident response performance.

Skills

Incident response lifecycle

Global coordination

Communication skills

Diplomacy and decision-making

Ambiguity management

Forensics/DFIR knowledge

Threat intelligence

Emotional intelligence

Presentation skills

Education

Bachelor’s or Master’s Degree in CS/IS/Engineering

Tools

SIEM (Sentinel)

Azure / cloud investigation consoles

Job description

EY is seeking a Senior Cyber Incident Response Coordinator to lead complex global cyber incident containment, investigation, and recovery. You will coordinate with Legal, Data Privacy, and Risk Management teams, while guiding junior staff and improving incident response processes.

The role requires senior expertise in forensics, incident response, and threat analysis, with strong communication and diplomacy to operate across executive stakeholders and time zones.