Global Cyber Incident Response Lead

Ernst & Young Advisory Services Sdn Bhd; Greater London; On-site; GBP 90,000 - 140,000; Full time

Job summary

EY Technology is seeking a Senior Cyber Incident Response Coordinator to lead global cybersecurity incident response activities. You will coordinate across international teams, manage on‑call rotations, and work with General Counsel, Data Privacy, and Risk Management to protect EY’s information assets.

The role requires deep incident response knowledge, forensics capability, and experience with SIEM tools (Splunk/Sentinel).

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Systems, Engineering, or related field.
• 7+ years’ experience in at least two cyber defense roles including SOC/Incident Coordinator.
• Experience with SIEM technologies (e.g., Splunk, Sentinel).
• Knowledge of Windows and Unix/Linux operating systems.
• Willingness to pursue related professional certifications such as GCFE, GCFA, GCIH, CISA, CISM, CISSP, CCIM.

Responsibilities

• Coordinate response efforts to cybersecurity incidents across global teams and manage on‑call rotations.
• Serve as liaison with General Counsel, Data Privacy/Protection and Risk Management.
• Develop and maintain incident response playbooks and knowledgebase across teams.
• Draft timely reports and updates to leadership during incidents.
• Drive process improvements and alignment with peer incident management programs.
• Collaborate with incident response leads to review performance and identify improvements.
• Lead communications to stakeholders and ensure case documentation.
• Own and manage internal playbooks and knowledge resources.
• Must be willing to be on‑call off hours in rotation.

Skills

Incident response

Global coordination

Forensics

SIEM

Cyber threat intelligence

Communication skills

Regulatory awareness

Team leadership

Education

Bachelor's or Master's in CS/Info Systems/Engineering

Tools

Splunk

Sentinel

Forensic tools

Job description

EY Technology is seeking a Senior Cyber Incident Response Coordinator to lead global cybersecurity incident response activities. You will coordinate across international teams, manage on‑call rotations, and work with General Counsel, Data Privacy, and Risk Management to protect EY’s information assets.

The role requires deep incident response knowledge, forensics capability, and experience with SIEM tools (Splunk/Sentinel).