Cyber Incident Response Lead

EY; Hong Kong; On-site; HKD 800,000 - 1,100,000; Full time

Job summary

EY is seeking a Manager in the Forensic & Integrity Services’ Cyber Incident Response team in Hong Kong. You will lead live cyber incident engagements, coordinate cross-functional investigations, and guide clients through containment, eradication, and recovery activities.

The role requires strong leadership, communication, and stakeholder management in a fast-paced environment. You will collaborate with cybersecurity, digital forensics, legal, risk, and business teams to deliver high-impact

Qualifications

• Approximately 5 to 8 years of relevant experience in cyber incident response, digital forensics, cyber investigations, cybersecurity, technology risk, information security, or related disciplines.
• Experience leading cyber incident response engagements involving ransomware attacks, data breaches, unauthorized access incidents, or insider threats.
• Experience coordinating digital forensic investigations and preparing executive briefings and stakeholder communications.

Responsibilities

• Lead cyber incident response engagements for clients during live cyber incidents by managing the engagement team and coordinating stakeholders.
• Assemble and lead multidisciplinary teams to support client response, investigation, and recovery activities.
• Oversee digital forensic investigations including evidence preservation, imaging, log analysis, and root cause assessment.
• Coordinate forensic analysis across endpoints, servers, cloud environments, and other platforms to determine impact.
• Develop executive briefings, incident reports, and decision-support materials for senior management and regulators.
• Manage project delivery, budgets, timelines, and engagement teams to ensure outcomes.

Skills

Cyber incident response

Digital forensics

Cyber investigations

Information security

Stakeholder management

Project management

Leadership

Communication

Education

Bachelor's degree in a relevant field

Professional certifications e.g. CISSP (advantageous)

Tools

Forensic imaging tools

Log analysis tools

Incident management platforms

Job description

EY is seeking a Manager in the Forensic & Integrity Services’ Cyber Incident Response team in Hong Kong. You will lead live cyber incident engagements, coordinate cross-functional investigations, and guide clients through containment, eradication, and recovery activities.

The role requires strong leadership, communication, and stakeholder management in a fast-paced environment. You will collaborate with cybersecurity, digital forensics, legal, risk, and business teams to deliver high-impact