Lead Incident Command & Response Coordinator

EY; Philadelphia (Philadelphia County); Hybrid; USD 104,800 - 192,200; Full time

Benefits offered by this job

Hybrid work model

Total Rewards package

Paid time off

Job summary

EY is seeking a Lead Incident Response Coordinator to serve as the central point of coordination for operational, cybersecurity, infrastructure, connectivity, monitoring, and service-impacting incidents.

The role leads incident command activities, coordinates cross-functional response efforts, manages communications and escalations, and tracks recovery actions to ensure timely restoration and accountability.

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Engineering, Business, or equivalent experience preferred.
• 6+ years of incident management or cross-functional delivery experience.
• Experience coordinating incidents, escalations, and cross-functional response activities.
• Strong communication, facilitation, documentation, prioritization, and decision-support skills.

Responsibilities

• Serve as lead coordinator for incidents and major operational events requiring cross-functional response.
• Establish incident command structure and response rhythm during active incidents.
• Coordinate response activities across technical teams, vendors, and stakeholders.
• Assign, confirm, and track incident actions through restoration and closure.
• Maintain stakeholder awareness and ensure timely service restoration.

Skills

Incident management

Cross-functional coordination

Cybersecurity operations

Communication

Documentation

Facilitation

Education

Bachelor's degree in IT, Cybersecurity, Engineering, or related field

Job description

EY is seeking a Lead Incident Response Coordinator to serve as the central point of coordination for operational, cybersecurity, infrastructure, connectivity, monitoring, and service-impacting incidents.

The role leads incident command activities, coordinates cross-functional response efforts, manages communications and escalations, and tracks recovery actions to ensure timely restoration and accountability.