Assurance - Forensic & Integrity Services - Cyber Incident Response - Senior

EY; Hong Kong; On-site; HKD 480,000 - 760,000; Full time

Job summary

EY Hong Kong is seeking a Senior in Forensic & Integrity Services, Cyber Incident Response, to join our team. You will lead cognitive investigations, coordinate incident response activities, and work with Legal, Risk, Privacy, and IT teams to assess, contain, and recover from cyber events.

You will develop client deliverables, engage in post-incident reviews, and help strengthen cyber security capabilities across diverse engagements.

Qualifications

• 2–5 years of relevant experience in cyber incident response, digital forensics, cyber investigations, cybersecurity, technology risk, information security, or related disciplines.
• Experience supporting cyber incident response engagements involving ransomware attacks, data breaches, unauthorized access incidents, insider threats, or other cybersecurity events.
• Experience supporting digital forensic investigations, including evidence preservation, forensic imaging, log analysis, root cause investigations, and assessment of potential data compromise.
• Experience preparing investigation reports, incident updates, presentations, and stakeholder communications relating to cyber incidents.
• Experience working with stakeholders across Information Security, Technology, Risk, Legal, Compliance, Privacy, or other business functions.
• Working knowledge of cyber security frameworks and standards such as ISO 27001 or ISO/IEC 27035 (not mandatory).
• Professional certifications such as Security+, GCIH, GCFA, CHFI, EnCE, CISM, CISSP, or equivalent would be advantageous.

Responsibilities

• Support cyber incident response engagements involving cyber breaches, ransomware attacks, data exfiltration, insider threats, unauthorized system access, and other cybersecurity events.
• Support engagement teams during live cyber incidents by assisting with situation assessment, issue tracking, stakeholder coordination, and response activities.
• Assist with digital forensic investigations, including evidence preservation, forensic imaging, forensic data collection, log analysis, timeline reconstruction, root cause assessment, and analysis of potential data compromise or exfiltration.
• Perform forensic analysis across endpoints, servers, cloud environments, mobile devices, email systems, and other relevant technology platforms to help determine the scope and impact of cyber incidents.
• Assist in assessing the nature and extent of compromised systems, accounts, and data to support containment, eradication, recovery, and remediation activities.
• Conduct cyber incident impact assessments, including analysis of operational, regulatory, financial, and reputational implications.
• Support clients in determining whether sensitive, personal, confidential, or regulated data has been accessed, compromised, or exfiltrated.
• Develop incident reports, executive briefings, action trackers, investigation findings, presentations, and other client deliverables.
• Work closely with client stakeholders including Legal, Risk, Compliance, Communications, Privacy, Human Resources, Information Security, and Technology functions throughout incident response and recovery activities.
• Support post-cyber incident reviews, root cause assessments, and lessons learned activities to identify opportunities for strengthening cyber security and incident response capabilities.
• Manage workstreams and support project delivery to ensure engagements are delivered on time and to a high-quality standard.

Skills

Cyber incident response

Digital forensics

Cyber investigations

Information security

Technology risk

Stakeholder management

Communication skills

Analytical thinking

Problem solving

Job description

Assurance - Forensic & Integrity Services - Cyber Incident Response - Senior - Ernst & Young Advisory Services Limited - Hong Kong

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

The Opportunity

As a Senior within EY Forensic & Integrity Services, you will join our Cyber Incident Response team and support organizations in responding to cyber incidents and technology-related investigations. Working alongside experienced cyber incident response and digital forensics professionals, you will help clients assess the nature and impact of cyber events, support cyber breach investigations, coordinate response activities, and assist with recovery efforts following cyber incidents.

You will gain exposure to a wide range of cyber incident scenarios, including ransomware attacks, data breaches, insider threats, unauthorized system access, and other cybersecurity events. The role provides the opportunity to work closely with client stakeholders across technology, legal, risk, compliance, and business functions while developing practical experience in cyber investigations, digital forensics, incident response, and cyber recovery.

Your Key Responsibilities

• Support cyber incident response engagements involving cyber breaches, ransomware attacks, data exfiltration, insider threats, unauthorized system access, and other cybersecurity events.
• Support engagement teams during live cyber incidents by assisting with situation assessment, issue tracking, stakeholder coordination, and response activities.
• Assist with digital forensic investigations, including evidence preservation, forensic imaging, forensic data collection, log analysis, timeline reconstruction, root cause assessment, and analysis of potential data compromise or exfiltration.
• Perform forensic analysis across endpoints, servers, cloud environments, mobile devices, email systems, and other relevant technology platforms to help determine the scope and impact of cyber incidents.
• Assist in assessing the nature and extent of compromised systems, accounts, and data to support containment, eradication, recovery, and remediation activities.
• Conduct cyber incident impact assessments, including analysis of operational, regulatory, financial, and reputational implications.
• Support clients in determining whether sensitive, personal, confidential, or regulated data has been accessed, compromised, or exfiltrated.
• Develop incident reports, executive briefings, action trackers, investigation findings, presentations, and other client deliverables.
• Work closely with client stakeholders including Legal, Risk, Compliance, Communications, Privacy, Human Resources, Information Security, and Technology functions throughout incident response and recovery activities.
• Support post-cyber incident reviews, root cause assessments, and lessons learned activities to identify opportunities for strengthening cyber security and incident response capabilities.
• Manage workstreams and support project delivery to ensure engagements are delivered on time and to a high-quality standard.

Skills and Attributes for Success

• Strong interest in cyber incident response, digital forensics, cyber investigations, information security, or technology risk.
• Strong analytical and problem-solving skills, with the ability to assess technical issues and develop practical recommendations.
• Ability to translate technical findings into clear and concise communications for both technical and non-technical audiences.
• Excellent written and verbal communication skills.
• Ability to perform effectively in dynamic and high-pressure environments.
• Strong attention to detail and ability to analyse large volumes of information.
• Strong stakeholder management and interpersonal skills.
• Ability to manage multiple priorities and work collaboratively within diverse teams.

To qualify for the role you must have

• Approximately 2 to 5 years of relevant experience in cyber incident response, digital forensics, cyber investigations, cybersecurity, technology risk, information security, or related disciplines.
• Experience supporting cyber incident response engagements involving ransomware attacks, data breaches, unauthorized access incidents, insider threats, or other cybersecurity events.
• Experience supporting digital forensic investigations, including evidence preservation, forensic imaging, log analysis, root cause investigations, and assessment of potential data compromise.
• Experience preparing investigation reports, incident updates, presentations, and stakeholder communications relating to cyber incidents.
• Experience working with stakeholders across Information Security, Technology, Risk, Legal, Compliance, Privacy, or other business functions.
• Working knowledge of cyber security and cyber incident response frameworks and standards such as ISO 27001 (Information Security Management Systems), ISO/IEC 27035 (Information Security Incident Management), or similar, but not mandatory.
• Professional certifications such as Security+, GCIH, GCFA, CHFI, EnCE, CISM, CISSP, or equivalent would be advantageous.

What we offer you

At EY, we’ll develop you with future-focused skills and equip you with world-class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more.

To help create an equitable and inclusive experience during the recruitment process, please inform us as soon as possible about any disability-related adjustments or accommodations you may need.

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.