Cyber Incident Response Manager — Forensics & Crisis

EY; San Francisco (CA); Hybrid; USD 105,000 - 219,000; Full time

Job summary

EY is seeking an experienced Manager to lead client engagements involving cyber incidents, data breaches, and information security events. Focus on post-incident response, advising on data exposure, regulatory obligations, remediation, and stakeholder communications. Lead multidisciplinary teams and deliver board-ready reports.

The role requires managing large, multi-workstream engagements with strong leadership, privacy, legal, and cyber expertise, including executive-level client interactions.

Qualifications

• Bachelor’s or master’s degree in computer science, information systems, engineering, cybersecurity or a related field.
• 5 to 8 years of experience in cyber incident response, data breach response, digital forensics, privacy or cybersecurity consulting.
• Strong written and verbal communication skills for executive-level presentations.

Responsibilities

• Lead end-to-end breach response engagements following incident containment and forensic investigation.
• Coordinate cross-functional teams including cybersecurity, privacy, legal, forensic, compliance, and client stakeholders.
• Advise clients on notification, regulatory, contractual, and reporting obligations arising from security incidents.
• Develop executive-level reports, client deliverables, regulatory submissions, and board-ready communications.
• Guide clients through remediation planning and implementation, including process improvements and control enhancements.
• Manage large-scale projects involving multiple workstreams and tight deadlines.

Skills

Cyber incident response

Project management

Executive communication

Stakeholder management

Mentoring

Regulatory awareness

Data analysis

Risk advisory

Negotiation

Travel readiness

Education

Bachelor’s or Master’s in CS/IS/Engineering/Cybersecurity or related field

Tools

Forensic tools

Job description

EY is seeking an experienced Manager to lead client engagements involving cyber incidents, data breaches, and information security events. Focus on post-incident response, advising on data exposure, regulatory obligations, remediation, and stakeholder communications. Lead multidisciplinary teams and deliver board-ready reports.

The role requires managing large, multi-workstream engagements with strong leadership, privacy, legal, and cyber expertise, including executive-level client interactions.