Lead Incident Command & Response Coordinator

EY; Cleveland (OH); Hybrid; USD 105,000 - 192,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

401(k) plan

Paid time off

Flexible vacation policy

Job summary

EY seeks a Lead Incident Response Coordinator to serve as the central point of coordination for operational, cybersecurity, infrastructure, connectivity, monitoring, and service-impacting incidents.

The role leads incident command activities, coordinates cross-functional response efforts, manages communications and escalations, tracks resolution actions, and helps ensure timely service restoration while maintaining operational accountability and stakeholder awareness.

Qualifications

• Bachelor's degree or equivalent experience in IT, cybersecurity, engineering or business.
• Strong communication, facilitation, documentation, prioritization and decision-support skills.
• Ability to coordinate technical teams without performing all remediation activities.

Responsibilities

• Incident Command and Coordination: lead incidents and cross-functional response.
• Escalation Management: determine severity and engage experts and leadership.
• Communications Management: craft clear updates for leaders and stakeholders.
• Resolution Tracking and Recovery: log actions and drive completion.
• Cross-Team Operational Leadership: align teams across domains and vendors.
• Post-Incident Review: coordinate reviews and drive improvements.

Skills

Incident command

Service restoration

Stakeholder communications

Action tracking

Escalation management

Executive updates

Response coordination

Cross-domain triage

Status reporting

Major incident practices

Operational dependencies

Post-incident reviews

Decision logs

Support model awareness

Playbook improvement

Education

Bachelor's degree in Information Technology, Cybersecurity, Engineering, Business, or equivalent experience preferred.

Job description

EY seeks a Lead Incident Response Coordinator to serve as the central point of coordination for operational, cybersecurity, infrastructure, connectivity, monitoring, and service-impacting incidents.

The role leads incident command activities, coordinates cross-functional response efforts, manages communications and escalations, tracks resolution actions, and helps ensure timely service restoration while maintaining operational accountability and stakeholder awareness.