Lead Incident Response Coordinator — Cross-Domain Ops

EY; New York (NY); Hybrid; USD 126,000 - 219,000; Full time

Benefits offered by this job

Hybrid work model

Competitive compensation and benefits

Hybrid team collaboration

Job summary

EY is seeking a Lead Incident Response Coordinator to serve as the central point for coordinating operational, cybersecurity, infrastructure, connectivity, monitoring, and service-impacting incidents. You will lead incident command activities, manage cross-functional response efforts, coordinate communications, track recovery actions, and ensure timely service restoration with clear accountability.

This role works across operations, cybersecurity, monitoring, network, and vendor teams to engage

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Engineering, Business, or equivalent experience preferred.
• 6+ years of experience in incident management, operations coordination, cybersecurity operations, infrastructure operations, service management, or technical delivery roles.
• Experience coordinating incidents, escalations, major operational events, or cross-functional response activities.
• Strong understanding of operational support models, service restoration practices, escalation processes, and stakeholder communications.
• Ability to coordinate technical teams without directly performing all technical remediation activities.
• Strong communication, facilitation, documentation, prioritization, and decision-support skills.
• Ability to operate effectively under pressure and maintain clear structure during high-impact incidents.

Responsibilities

• Lead incident command and coordinate cross-functional response efforts during incidents and major events.
• Establish incident command structure, response rhythm, and ownership during active incidents.
• Coordinate response activities across technical, operational, cybersecurity, vendor, and stakeholder teams.
• Assign, confirm, and track incident actions through restoration and closure.
• Ensure response activities align with incident priority, business impact, and restoration objectives.
• Develop and coordinate clear incident communications for teams and leadership.
• Maintain stakeholder awareness throughout the incident lifecycle with status and recovery progress.
• Drive post-incident reviews and continuous improvement opportunities.
• Support handoff from active incident response into remediation, problem management, or improvement efforts.
• Coordinate cross-team coordination and share lessons learned to improve playbooks.

Skills

Incident command

Service restoration

Stakeholder communications

Action tracking

Escalation management

Executive updates

Response coordination

Cross-domain triage

Status reporting

Major incident practices

Operational dependencies

Post-incident reviews

Decision logs

Support model awareness

Playbook improvement

Education

Bachelor's degree in Information Technology, Cybersecurity, Engineering, Business, or equivalent experience preferred

Tools

Ticketing systems

SIEM/SOC tools

Job description

EY is seeking a Lead Incident Response Coordinator to serve as the central point for coordinating operational, cybersecurity, infrastructure, connectivity, monitoring, and service-impacting incidents. You will lead incident command activities, manage cross-functional response efforts, coordinate communications, track recovery actions, and ensure timely service restoration with clear accountability.

This role works across operations, cybersecurity, monitoring, network, and vendor teams to engage