Incident Coordinator (Senior)

EY; Województwo mazowieckie; On-site; PLN 90,000 - 130,000; Full time

Benefits offered by this job

Qualifications support

EY Badges

Career Counselor

Mental health platform

Private healthcare

Life insurance

Sports cards

Language-learning platform

MBA opportunity

Job summary

EY Poland is seeking a cybersecurity incident coordination lead to own end-to-end incident management. You will drive activation through formal closure, define severity, establish priorities, and coordinate across Incident Response, SOC, IT, Legal, Privacy, Risk, and Communications.

The role includes leading tabletop exercises, post-incident reviews, and continuous improvements to incident response governance and controls.

Qualifications

• Experience in coordinating cybersecurity incidents, IT crises, major incidents or security operations.
• Strong understanding of the Incident Response lifecycle, escalation processes and crisis management.
• Ability to make sound decisions based on incomplete, changing information.
• Strong prioritisation, organisational and time management skills, including the ability to work effectively under pressure.
• Ability to clearly communicate complex technical situations to executives and non-technical stakeholders.
• Experience in preparing management reports, incident briefings and audit documentation.
• Experience in working with Legal, Privacy, Compliance, Risk, Communications teams and external providers.
• Additional language skills will be an advantage.

Responsibilities

• Activating and managing the incident response process from initiation through formal closure.
• Establishing incident severity, priority, scope, response model and escalation path.
• Forming the response team and assigning clear ownership of individual actions.
• Developing the response plan, defining priorities and establishing decision points and checkpoints.
• Coordinating the work of Incident Response, SOC, IT, Cloud, Network, Application, Legal, Privacy, Risk, Communications and business teams.
• Maintaining an accurate overview of the situation, including confirmed facts, open questions, risks, decisions and next steps.
• Leading regular status calls and providing clear updates to senior management and other stakeholders.
• Ensuring containment, eradication and recovery activities are performed in a controlled and coordinated manner.
• Coordinating decisions concerning system isolation, service restrictions, credential resets, system restoration, customer communications and external support.
• Leading post-incident reviews, lessons‑learned sessions and root cause analysis activities.
• Improving incident response procedures, RACI models, severity definitions, communication templates and crisis exercises.
• Leading tabletop exercises and major incident simulations.

Job description

Join our cybersecurity team and take end-to-end ownership of coordinating complex cybersecurity incidents, from initial activation and technical response through stakeholder communication, recovery, formal closure and post-incident improvements. You will bring together technical, business and control functions, helping teams establish priorities, make informed decisions and execute the incident response process in a structured and controlled manner.

EY.AI – in this role, you will work in an environment where AI agents are part of the team and everyday project work. You will use solutions tailored to your role and team that support data analysis, recommendation development and solution design.

Your scope of duties

• Activating and managing the incident response process from initiation through formal closure.
• Establishing incident severity, priority, scope, response model and escalation path.
• Forming the response team and assigning clear ownership of individual actions.
• Developing the response plan, defining priorities and establishing decision points and checkpoints.
• Coordinating the work of Incident Response, SOC, IT, Cloud, Network, Application, Legal, Privacy, Risk, Communications and business teams.
• Maintaining an accurate overview of the situation, including confirmed facts, open questions, risks, decisions and next steps.
• Leading regular status calls and providing clear updates to senior management and other stakeholders.
• Ensuring that containment, eradication and recovery activities are performed in a controlled and coordinated manner.
• Coordinating decisions concerning system isolation, service restrictions, credential resets, system restoration, customer communications and external support.
• Leading post-incident reviews, lessons‑learned sessions and root cause analysis activities.
• Improving incident response procedures, RACI models, severity definitions, communication templates and crisis exercises.
• Leading tabletop exercises and major incident simulations.

Our requirements

• Experience in coordinating cybersecurity incidents, IT crises, major incidents or security operations.
• Strong understanding of the Incident Response lifecycle, escalation processes and crisis management.
• Ability to make sound decisions based on incomplete, changing and sometimes conflicting information.
• Strong prioritisation, organisational and time management skills, including the ability to work effectively under pressure.
• Ability to clearly communicate complex technical situations to executives and non-technical stakeholders.
• Experience in preparing management reports, incident briefings and audit documentation.
• Experience in working with Legal, Privacy, Compliance, Risk, Communications teams and external providers.
• Additional language skills will be an advantage.

What we offer

• Professional and financial support in obtaining recognised qualifications and certificates.
• EY Badges – global certification of your competencies and the opportunity to earn an MBA from the prestigious Hult International School of Business.
• Career Counselor – professional, one-to-one guidance on career building and development.
• Psycho-educational platform – a package of free consultations with specialists in the broad field of mental health and personal development, as well as access to educational activities.
• Benefit programme offering private healthcare with additional preventive examinations, life insurance, tickets, team sports, a language-learning platform, sports cards and much more, available online and offline.

About EY Poland

We are a global consulting and technology company.

We make a difference by transforming and changing services, products, organisations and even the rules of the game. We combine business and technology, using artificial intelligence and genuine human talent. We help organisations solve complex problems, make better decisions and implement positive change.

We provide confidence in data, opinions, standards, technology and security.

Every day, we take on challenges, analyse opportunities, use prompting, conduct research, collaborate, ask the right questions, plan, model, code, experiment and learn from our experience. We create solutions that are critical to our clients.

This is where lifelong friendships, relationships and memories are made.

This is where you do difficult and important things with supportive and talented people.

We care about the environment, not only the business environment. As part of our established plan, we have reduced our global greenhouse gas emissions by 40% compared with the 2019 baseline year.

EY is an equal opportunities employer. We value and promote the diversity of knowledge, experience and perspectives within our community. We create an environment based on respect, openness and collaboration, where everyone can develop and make a real impact. We run the “Poziom Wyżej bez Barier” programme, which supports employees with disabilities in pursuing their professional development ambitions and aspirations.

EY provides equal opportunities to all candidates throughout the recruitment process, regardless of gender, age, race, religion, sexual orientation, origin, disability or any other legally protected characteristic, in accordance with applicable law.

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.