Lead Incident Command & Response Coordinator

EY; San Mateo (CA); Hybrid; USD 104,800 - 192,200; Full time

Benefits offered by this job

Hybrid work model

Total rewards package

Job summary

EY in the United States is seeking a Lead Incident Response Coordinator to serve as the central point of coordination for operational, cybersecurity, infrastructure, connectivity, monitoring, and service-impacting incidents.

The role leads incident command activities, coordinates cross-functional response efforts, manages communications and escalations, tracks restoration actions, and supports post-incident review and continuous improvement, with a focus on coordination and accountability rather

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Engineering, Business, or equivalent experience preferred.
• 6+ years of experience in incident management, operations coordination, cybersecurity operations, infrastructure operations, service management, or technical delivery roles.
• Experience coordinating incidents, escalations, major operational events, or cross-functional response activities.
• Strong understanding of operational support models, service restoration practices, escalation processes, and stakeholder communications.
• Ability to coordinate technical teams without directly performing all technical remediation activities.

Responsibilities

• Incident Command and Coordination: Serve as the lead coordinator for incidents and major operational events requiring cross-functional response.
• Escalation Management: Coordinate engagement of appropriate technical specialists, support teams, vendors, and leadership stakeholders.
• Communications Management: Develop and coordinate clear incident communications for response teams, leadership, and impacted stakeholders.
• Resolution Tracking and Recovery Management: Maintain incident action logs, recovery tasks, and blockers.
• Cross-Team Operational Leadership: Coordinate response across monitoring, network, infrastructure, cybersecurity, and other teams.
• Post-Incident Review and Continuous Improvement: Coordinate reviews and implement improvement opportunities.

Skills

Incident command

Service restoration

Stakeholder communications

Action tracking

Escalation management

Executive updates

Response coordination

Cross-domain triage

Status reporting

Major incident practices

Operational dependencies

Post-incident reviews

Decision logs

Playbook improvement

Support model awareness

Education

Bachelor's degree in Information Technology, Cybersecurity, Engineering, Business, or equivalent experience preferred

Job description

EY in the United States is seeking a Lead Incident Response Coordinator to serve as the central point of coordination for operational, cybersecurity, infrastructure, connectivity, monitoring, and service-impacting incidents.

The role leads incident command activities, coordinates cross-functional response efforts, manages communications and escalations, tracks restoration actions, and supports post-incident review and continuous improvement, with a focus on coordination and accountability rather