Lead Incident Response Coordinator: Cross-Domain Ops

EY; Toledo (OH); Hybrid; USD 105,000 - 192,000; Full time

Benefits offered by this job

Hybrid work model

Competitive compensation package

Professional development

Job summary

EY is seeking a Lead Incident Response Coordinator to serve as the central point of coordination for operational, cybersecurity, infrastructure, connectivity, monitoring, and service-impacting incidents.

The role leads incident command activities, coordinates cross-functional response efforts, manages communications and escalations, tracks restoration actions, and helps ensure timely service restoration while maintaining accountability and stakeholder awareness.

Qualifications

• Bachelor's degree preferred or equivalent experience in IT, security, or engineering.
• 6+ years in incident management, operations coordination, or related roles.
• Ability to coordinate teams without performing all remediation activities.
• Strong documentation, facilitation, and decision-support skills.

Responsibilities

• Serve as the lead coordinator for incidents and major operational events requiring cross-functional response.
• Establish incident command structure and response rhythms during active incidents.
• Coordinate response activities across technical, operational, cybersecurity, vendor, and stakeholder teams.
• Assign, confirm, and track incident actions through restoration and closure.
• Develop clear incident communications for leadership and impacted stakeholders.

Skills

Incident coordination

Incident command

Escalation management

Communication

Cross-team coordination

Stakeholder management

Education

Bachelor's degree in Information Technology, Cybersecurity, Engineering, or Business

Tools

SIEM/SOC workflows

Monitoring platforms

Ticketing systems

Job description

EY is seeking a Lead Incident Response Coordinator to serve as the central point of coordination for operational, cybersecurity, infrastructure, connectivity, monitoring, and service-impacting incidents.

The role leads incident command activities, coordinates cross-functional response efforts, manages communications and escalations, tracks restoration actions, and helps ensure timely service restoration while maintaining accountability and stakeholder awareness.