Lead Incident Command & Cross-Domain Coordination

EY; Tulsa (OK); On-site; USD 104,800 - 192,200; Full time

Job summary

EY is seeking a Lead Incident Response Coordinator to serve as the central point of coordination for operational, cybersecurity, infrastructure, connectivity, monitoring, and service-impacting incidents. The role leads incident command activities, coordinates cross-functional response, manages communications and escalations, tracks actions, and ensures timely service restoration with accountability.

The position emphasizes coordinating rather than performing deep technical remediation, working

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Engineering, Business, or equivalent experience preferred.
• 6+ years of experience in incident management, operations coordination, cybersecurity operations, infrastructure operations, service management, or technical delivery roles.
• Experience coordinating incidents, escalations, major operational events, or cross-functional response activities.
• Strong understanding of operational support models, service restoration practices, escalation processes, and stakeholder communications.
• Ability to coordinate technical teams without directly performing all technical remediation activities.
• Strong communication, facilitation, documentation, prioritization, and decision-support skills.
• Ability to operate effectively under pressure and maintain clear structure during high-impact incidents.

Responsibilities

• Incident Command and Coordination: Lead coordinator for incidents and major events requiring cross-functional response.
• Escalation Management: Evaluate severity, coordinate engagement of specialists, vendors, and leadership.
• Communications Management: Develop clear incident communications for teams and stakeholders.
• Resolution Tracking and Recovery Management: Maintain logs, track actions, and ensure restoration milestones.
• Cross-Team Operational Leadership: Coordinate response across monitoring, network, infrastructure, cybersecurity, and site teams.
• Post-Incident Review and Continuous Improvement: Coordinate reviews and identify recurring issues for improvements.

Skills

Incident command

Stakeholder communications

Cross-functional coordination

Decision support

Communication planning

Post-incident reviews

Education

Bachelor's degree in Information Technology, Cybersecurity, Engineering, Business, or equivalent experience preferred

Tools

SIEM/SOC workflows

Ticketing systems

Monitoring platforms

Job description

EY is seeking a Lead Incident Response Coordinator to serve as the central point of coordination for operational, cybersecurity, infrastructure, connectivity, monitoring, and service-impacting incidents. The role leads incident command activities, coordinates cross-functional response, manages communications and escalations, tracks actions, and ensures timely service restoration with accountability.

The position emphasizes coordinating rather than performing deep technical remediation, working