Cyber Incident Response Lead

EY; Województwo mazowieckie; Sur place; PLN 90 000 - 130 000; Plein temps

Avantages offerts par ce poste

Qualifications support

EY Badges

Career Counselor

Mental health platform

Private healthcare

Life insurance

Sports cards

Language-learning platform

MBA opportunity

Résumé du poste

EY Poland is seeking a cybersecurity incident coordination lead to own end-to-end incident management. You will drive activation through formal closure, define severity, establish priorities, and coordinate across Incident Response, SOC, IT, Legal, Privacy, Risk, and Communications.

The role includes leading tabletop exercises, post-incident reviews, and continuous improvements to incident response governance and controls.

Qualifications

• Experience in coordinating cybersecurity incidents, IT crises, major incidents or security operations.
• Strong understanding of the Incident Response lifecycle, escalation processes and crisis management.
• Ability to make sound decisions based on incomplete, changing information.
• Strong prioritisation, organisational and time management skills, including the ability to work effectively under pressure.
• Ability to clearly communicate complex technical situations to executives and non-technical stakeholders.
• Experience in preparing management reports, incident briefings and audit documentation.
• Experience in working with Legal, Privacy, Compliance, Risk, Communications teams and external providers.
• Additional language skills will be an advantage.

Responsabilités

• Activating and managing the incident response process from initiation through formal closure.
• Establishing incident severity, priority, scope, response model and escalation path.
• Forming the response team and assigning clear ownership of individual actions.
• Developing the response plan, defining priorities and establishing decision points and checkpoints.
• Coordinating the work of Incident Response, SOC, IT, Cloud, Network, Application, Legal, Privacy, Risk, Communications and business teams.
• Maintaining an accurate overview of the situation, including confirmed facts, open questions, risks, decisions and next steps.
• Leading regular status calls and providing clear updates to senior management and other stakeholders.
• Ensuring containment, eradication and recovery activities are performed in a controlled and coordinated manner.
• Coordinating decisions concerning system isolation, service restrictions, credential resets, system restoration, customer communications and external support.
• Leading post-incident reviews, lessons‑learned sessions and root cause analysis activities.
• Improving incident response procedures, RACI models, severity definitions, communication templates and crisis exercises.
• Leading tabletop exercises and major incident simulations.

Description du poste

EY Poland is seeking a cybersecurity incident coordination lead to own end-to-end incident management. You will drive activation through formal closure, define severity, establish priorities, and coordinate across Incident Response, SOC, IT, Legal, Privacy, Risk, and Communications.

The role includes leading tabletop exercises, post-incident reviews, and continuous improvements to incident response governance and controls.