Global Cyber Defense Incident Response Director

EY; Dallas (TX); Hybrid; USD 150,000 - 297,000; Full time

Job summary

EY is seeking a Senior Cyber Incident Response Coordinator to orchestrate global cybersecurity incident response across the firm. The role demands deep incident management expertise, forensics skills, and the ability to coordinate with Legal, Risk, and business partners.

Candidates should have 10+ years in information security, a degree in CS/IS/engineering, familiarity with SIEM/Azure, and readiness for on‑call rotation.

Qualifications

• Bachelor’s or Master’s Degree in Computer Science, Information Systems, Engineering, or related field
• 10+ years in information security roles including SOC, threat intelligence, detection engineering
• 3+ years in Cyber incident coordination/DFIR
• Experience with SIEM, cloud-based investigation consoles (Azure) and digital forensics tools
• Willingness to pursue relevant certifications (GCFE, GCFA, GCIH, CISA, CISM, CISSP, CCIM)

Responsibilities

• Coordinate complex, global cybersecurity incidents, including nontraditional hours
• Liaise with business, IT security teams, partners, and vendors
• Engage General Counsel, Data Privacy, and Risk Management contacts
• Integrate with other incident programs for consistency
• Oversee CIS projects as directed
• Counsel and manage junior team members
• Lead process and documentation improvements
• Develop scalable incident response processes and metrics
• Deliver leadership reports on team performance
• Draft communications and timely updates during/after incidents
• Own and oversee relevant processes and documentation
• Be on-call for off-hours rotation

Skills

Incident response management

Global coordination

Cybersecurity analytics

Forensics skills

Written and verbal communication

Diplomacy under pressure

Leadership and mentorship

Regulatory awareness

Problem solving under pressure

Education

Bachelor’s or Master’s Degree in Computer Science, Information Systems, Engineering, or related field

Tools

SIEM (Sentinel)

Azure cloud

Digital forensics tools

Job description

EY is seeking a Senior Cyber Incident Response Coordinator to orchestrate global cybersecurity incident response across the firm. The role demands deep incident management expertise, forensics skills, and the ability to coordinate with Legal, Risk, and business partners.

Candidates should have 10+ years in information security, a degree in CS/IS/engineering, familiarity with SIEM/Azure, and readiness for on‑call rotation.