Cyber Crisis & Forensics Response Manager

EY; Charlotte (NC); Hybrid; USD 125,000 - 218,000; Full time

Job summary

EY is seeking an experienced Manager to lead client engagements involving cyber incidents and data breaches. You will oversee post-incident response, assess data impact, coordinate remediation, and manage communications with executive stakeholders.

You’ll lead multidisciplinary teams through complex breach recovery and deliver board-ready deliverables. Ideal candidates bring 5–8 years in cyber incident response, strong regulatory knowledge, and proven ability to guide clients across

Qualifications

• Bachelor’s or master’s degree in CS/IS/Engineering/Cybersecurity or related field.
• 5–8 years of cyber incident response, data breach response, or related disciplines.
• Strong written and verbal communication for executive-level stakeholders.
• Understanding of privacy regulations and electronic discovery.
• Experience supervising engagement teams.
• Willingness to travel and work extended hours.
• Professional certifications such as GCFE, GCFA, CISSP, CISM, etc.
• Driver’s license and reliable transportation.

Responsibilities

• Lead end-to-end breach response engagements.
• Assess data impact and regulatory obligations.
• Coordinate cross-functional teams across disciplines.
• Advise on notification and reporting obligations.
• Develop executive-level reports and regulator submissions.
• Guide remediation planning and control enhancements.
• Manage large multi-workstream engagements with tight deadlines.
• Provide strategic counsel to client leadership.
• Mentor engagement teams to ensure deliverable quality.
• Drive lessons learned and business development opportunities.

Skills

Cybersecurity incident response

Data breach response

Executive communication

Project management

Team leadership

Stakeholder management

Education

Bachelor’s or Master’s degree in CS/IS/Engineering/Cybersecurity

Job description

EY is seeking an experienced Manager to lead client engagements involving cyber incidents and data breaches. You will oversee post-incident response, assess data impact, coordinate remediation, and manage communications with executive stakeholders.

You’ll lead multidisciplinary teams through complex breach recovery and deliver board-ready deliverables. Ideal candidates bring 5–8 years in cyber incident response, strong regulatory knowledge, and proven ability to guide clients across