Lead Incident Response Coordinator — Cross-Domain

EY; Indianapolis (IN); On-site; USD 104,800 - 192,200; Full time

Job summary

EY is seeking a Lead Incident Response Coordinator to serve as the central point of coordination for operational, cybersecurity, infrastructure, connectivity, monitoring, and service-impacting incidents.

The role leads incident command activities, coordinates cross-functional response efforts, manages communications and escalations, tracks resolution actions, and helps ensure timely service restoration while maintaining operational accountability and stakeholder awareness.

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Engineering, Business, or equivalent experience preferred.
• 6+ years of incident management or cross-functional operations coordination experience.
• Experience coordinating incidents and cross-functional response activities.
• Strong communication, facilitation, documentation, prioritization, and decision-support skills.
• Ability to operate under pressure and maintain structure during high-impact incidents.

Responsibilities

• Lead incidents and major operational events requiring cross-functional response.
• Establish incident command structure and response rhythm.
• Coordinate response activities across technical, operational, cybersecurity, vendor, and stakeholder teams.
• Track incident actions from restoration to closure.
• Maintain stakeholder awareness and timely restoration.
• Coordinate post-incident reviews and continuous improvement.
• Promote consistent incident handling across service domains.

Skills

Incident coordination

Communication

Escalation management

Cross-domain coordination

Stakeholder management

Leadership under pressure

Education

Bachelor's degree in Information Technology, Cybersecurity, Engineering, Business, or equivalent

Tools

SIEM/SOC workflows

Monitoring platforms

Ticketing systems

Collaboration tools

Job description

EY is seeking a Lead Incident Response Coordinator to serve as the central point of coordination for operational, cybersecurity, infrastructure, connectivity, monitoring, and service-impacting incidents.

The role leads incident command activities, coordinates cross-functional response efforts, manages communications and escalations, tracks resolution actions, and helps ensure timely service restoration while maintaining operational accountability and stakeholder awareness.