Global Cyber Incident Response Director

Ernst & Young Oman; Baton Rouge (LA); Hybrid; USD 150,000 - 297,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k)

Job summary

EY is seeking a Senior Cyber Incident Response Coordinator to orchestrate global cybersecurity investigations from declaration to resolution. The role emphasizes incident response planning, cross‑functional collaboration, and hands‑on forensics and analytics.

You will coordinate complex incidents, serve as liaison to counsel and risk teams, and lead process improvements. Must be able to work off-hours on rotation in a demanding security environment.

Qualifications

• Experience in cybersecurity incident response and incident management.
• Ability to coordinate global incidents with nontraditional hours.
• Strong verbal and written communication; diplomacy and judgment.

Responsibilities

• Coordinate complex response efforts to global cybersecurity incidents caused by external threats.
• Interface with Information Security teams, business partners, vendors, and external parties.
• Establish and maintain relationships with General Counsel, Data Privacy, and Risk Management contacts.
• Integrate with other incident management programs for consistency and alignment.

Skills

Incident response lifecycle

Global coordination

Communication skills

Diplomacy

Decision making

Post-incident lessons learned

Threat analysis

Windows/Unix/Linux

Education

Bachelor’s or Master’s Degree in Computer Science/Info Systems/Engineering

Tools

SIEM (e.g. Sentinel)

Azure or cloud investigation consoles

Digital forensics tools

Job description

EY is seeking a Senior Cyber Incident Response Coordinator to orchestrate global cybersecurity investigations from declaration to resolution. The role emphasizes incident response planning, cross‑functional collaboration, and hands‑on forensics and analytics.

You will coordinate complex incidents, serve as liaison to counsel and risk teams, and lead process improvements. Must be able to work off-hours on rotation in a demanding security environment.