Lead Incident Command & Cross-Domain Response

EY; Des Moines (IA); Hybrid; USD 105,000 - 192,000; Full time

Benefits offered by this job

Hybrid model

Total rewards package

Paid time off

Medical and dental coverage

Job summary

EY seeks a Lead Incident Response Coordinator to serve as the central point of coordination for operational, cybersecurity, infrastructure, connectivity, monitoring, and service-impacting incidents.

The role leads incident command activities, coordinates cross-functional response efforts, manages communications and escalations, tracks resolution actions, and helps ensure timely service restoration while maintaining accountability and stakeholder awareness.

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Engineering, Business, or equivalent experience preferred.
• 6+ years of experience in incident management, operations coordination, cybersecurity operations, or related roles.
• Experience coordinating incidents, escalations, and cross-functional response activities.

Responsibilities

• Serve as the lead coordinator for incidents and major operational events requiring cross-functional response.
• Establish incident command structure, response rhythm, and clear ownership during active incidents.
• Coordinate response activities across technical, operational, cybersecurity, vendor, and stakeholder teams.
• Assign, confirm, and track incident actions through restoration and closure.
• Ensure response activities remain aligned to incident priority, business impact, and restoration objectives.
• Coordinate incident communications with leadership and impacted stakeholders.

Skills

Incident command

Stakeholder communications

Escalation management

Cross-domain coordination

Post-incident reviews

Education

Bachelor's degree in IT, Cybersecurity, Engineering or equivalent

Tools

ITIL

Security+

CISM

PMP

Job description

EY seeks a Lead Incident Response Coordinator to serve as the central point of coordination for operational, cybersecurity, infrastructure, connectivity, monitoring, and service-impacting incidents.

The role leads incident command activities, coordinates cross-functional response efforts, manages communications and escalations, tracks resolution actions, and helps ensure timely service restoration while maintaining accountability and stakeholder awareness.