Lead Incident Command & Coordination Specialist

EY; Salt Lake City (UT); Hybrid; USD 104,800 - 192,200; Full time

Benefits offered by this job

Hybrid work model

401(k) plan

Medical/dental coverage

Paid time off

Job summary

EY is seeking a Lead Incident Response Coordinator to serve as the central point of coordination for operational, cybersecurity, infrastructure, connectivity, monitoring, and service-impacting incidents.

The role leads incident command activities, coordinates cross-functional response efforts, manages communications and escalations, tracks restoration actions, and helps ensure timely service restoration while maintaining accountability.

Qualifications

• Bachelor's degree or equivalent experience in IT, cybersecurity, engineering or business.
• 6+ years in incident management, operations coordination, or related roles.
• Experience coordinating incidents and cross-functional response.
• Strong communication and decision-support skills.
• Ability to coordinate technical teams without performing all remediation activities.

Responsibilities

• Coordinate incident command across cross-functional teams.
• Track actions, ownership, and restoration progress.
• Develop clear incident communications for stakeholders.
• Escalate issues and ensure timely resolution.
• Lead post-incident reviews and continuous improvement.

Skills

Incident command

Service restoration

Stakeholder communications

Action tracking

Escalation management

Executive updates

Response coordination

Cross-domain triage

Status reporting

Major incident practices

Operational dependencies

Post-incident reviews

Decision logs

Support model awareness

Playbook improvement

Education

Bachelor's degree in Information Technology, Cybersecurity, Engineering, Business, or equivalent

Tools

SIEM/SOC platforms

Ticketing systems

Collaboration tools

Job description

EY is seeking a Lead Incident Response Coordinator to serve as the central point of coordination for operational, cybersecurity, infrastructure, connectivity, monitoring, and service-impacting incidents.

The role leads incident command activities, coordinates cross-functional response efforts, manages communications and escalations, tracks restoration actions, and helps ensure timely service restoration while maintaining accountability.